| 470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988362388 | 3.16.61.53 | 302 Found | 134 B |
URL User Request GET HTTP/2470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988362388 IP 3.16.61.53:443
CertificateIssuerAmazon Subject470kwc1.com FingerprintC8:F6:48:19:9F:92:B8:B3:78:6A:46:25:3A:C3:80:8E:21:07:B3:C6 ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /clk.trk?CID=465853&AFID=430135&SID=3415259331988362388 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 09 Dec 2023 15:04:20 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://470kwc1.com:443/clk.trk?CID=465853&AFID=430135&SID=3415259331988362388
|
|
| 470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988362388 | 3.142.154.0 | 302 Found | 216 B |
URL User Request GET HTTP/2470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988362388 IP 3.142.154.0:443
CertificateIssuerAmazon Subject470kwc1.com FingerprintC8:F6:48:19:9F:92:B8:B3:78:6A:46:25:3A:C3:80:8E:21:07:B3:C6 ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash530b70b8eb8f81ebdb3bda0d4b598186 1aafacffde20583f4103d75f9a81dcb78db4d0f5 a2e8e7bb49221f2aaab88c617882de63c3e44ad627a7a33a7e4eaaa68973b792
GET /clk.trk?CID=465853&AFID=430135&SID=3415259331988362388 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 15:04:20 GMT
content-type: text/html; charset=utf-8
content-length: 216
location: https://pro.paradigm-press.info/m/2246202?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5
cache-control: private
server: Microsoft-IIS/10.0
p3p: policyref="/p3p/P3P.470kwc1.com.xml", CP="NOI DSP COR NID ADM DEV OUR STP OTC"
x-aspnet-version: 4.0.30319
set-cookie: LTTC6_465853=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5; expires=Sat, 16-Dec-2023 15:04:20 GMT; path=/; secure; SameSite=None
x-powered-by: ASP.NET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| pro.paradigm-press.info/m/2246202?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5 | 192.135.136.169 | 301 Moved Permanently | 253 B |
URL User Request GET HTTP/1.1pro.paradigm-press.info/m/2246202?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5 IP 192.135.136.169:443
CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39 ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash470b2b5cd666ddd34ad18db3e145a441 57138ca06037a1af1b8feedb540e394758d07a04 db281bbe024839278a1846a6f3075183c86bf32f51e986e4f0d553d12e6a98da
GET /m/2246202?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5 HTTP/1.1
Host: pro.paradigm-press.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true
Date: Sat, 09 Dec 2023 15:04:21 GMT
Content-Length: 253
Set-Cookie: 2246202=2658340; expires=Fri, 29-Dec-2023 15:04:21 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!asDQxTWbNhqdhV80QCUGrw3uOK3bWYej58nMs1ZyDst6sajoCQ6WA2h2YelNnjX4MMTg6IppSStXYvQ=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| click.thedailymoneytips.com/ | 188.114.97.1 | | 143 B |
URL click.thedailymoneytips.com/ IP 188.114.97.1:0
File typeHTML document, ASCII text Hashf1fb042c62910c34be16ad91cbbd71fa 5bc7aceba9a8704ef4b1d427d7d08b140afcd866 9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Dec 2023 15:04:21 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LYuLIvDWB2MgPhGNfuIR3M0PBqewEnyoOu9BmSfRg%2Fz6PHJknf2YgVzGHRS8yhR1TjUhOG5%2FF%2FYa9Df%2BXc%2B%2FkP9azSuRmBIqBz2PaMK%2F9nVxii33ZQqqUSqnp%2Fnv%2Bn3LMkjUE%2BIczQpECZzrt%2FY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 832e23dd288f0b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true | 161.129.26.18 | 200 OK | 253 B |
URL User Request GET HTTP/1.1pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true IP 161.129.26.18:443
CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39 ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash470b2b5cd666ddd34ad18db3e145a441 57138ca06037a1af1b8feedb540e394758d07a04 db281bbe024839278a1846a6f3075183c86bf32f51e986e4f0d553d12e6a98da
GET /p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 15:04:22 GMT
Content-Length: 253
Set-Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!2yEO8G37WBy4zAk0QCUGrw3uOK3bWZG5QAuU2dj5ymUykXfZqSuWxS4MZTuNzygjObnyqZa+FA6eDNI=; path=/; Httponly
|
|
| verifiedwebpage.com/go?ehash=82dd8b2f17dd1f146d4f3cda90d58384&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8] | 188.114.96.1 | 302 Found | 10 kB |
URL User Request GET HTTP/2verifiedwebpage.com/go?ehash=82dd8b2f17dd1f146d4f3cda90d58384&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8] IP 188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectverifiedwebpage.com Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
File typegzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT) Hashdaee3d7188b088f24dce61626ad65cb1 e313fd6f10d53952402210affea779eff7070c64 a19557cc7ec35a5951841dd91dc05053866ea92837a0a414b58aa8731f2b1148
GET /go?ehash=82dd8b2f17dd1f146d4f3cda90d58384&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 15:04:19 GMT
content-type: text/html; charset=UTF-8
location: http://470kwc1.com/clk.trk?CID=465853&AFID=430135&SID=3415259331988362388
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=9844e3aa397ec8c2041cdd4839c24b9e; path=/
pixel_session_hash_32827=3415259331988362388; expires=Mon, 08-Jan-2024 15:04:18 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_32827=6ac56d7568aca1bdbb7e40b0ef36e3945173b9c69d8567ea43e3643b9d1b2fb0; expires=Mon, 11-Dec-2023 15:04:18 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=72gsvdVW%2BkoAG1d3OfvDllzGlxQF1L4EpPsFAzTvIe6ffDzpgNshMHJGgO2Jjvy1gZ2uHid3dJQuY49WG7LeMqckgkCgXyup0pNH7xeOj8Px4lgd%2B3xMU1AKFLzmy%2FqlMt6o%2BU4S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 832e23cf382156a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/E-v1.js | 151.101.194.132 | 200 OK | 129 kB |
URL GET HTTP/2fast.wistia.com/assets/external/E-v1.js IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File typeASCII text, with very long lines (65474) Size129 kB (129063 bytes) Hash126858c9f3376ca1bc419aa2a2d0af28 51e06cde2e8cc415d06c63e144e6c36d2c95270d 78cf6679aa583fd97b9700d6dafa7e791d7861b72d173df807b5f8f27d246877
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2dfa35fa3c2d63da5bfe8edd5f3cb8df"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:22 GMT
age: 629
x-served-by: cache-iad-kiad7000039-IAD, cache-bma1626-BMA
x-cache: HIT, HIT
x-cache-hits: 75, 6
x-timer: S1702134263.961229,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 129063
X-Firefox-Spdy: h2
|
|
| pro.paradigmnewsletters.org/p/Scripts/Common.js | 161.129.26.18 | 200 OK | 1.1 kB |
URL GET HTTP/1.1pro.paradigmnewsletters.org/p/Scripts/Common.js IP 161.129.26.18:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39 ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash2fa1e7a35bfa376eff7f1426fc4a8afa 008b48dbd95a158542969743c18d0bc33e0a9384 857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true
DNT: 1
Connection: keep-alive
Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!2yEO8G37WBy4zAk0QCUGrw3uOK3bWZG5QAuU2dj5ymUykXfZqSuWxS4MZTuNzygjObnyqZa+FA6eDNI=; LAWNZ985=; BIGipServerIRIS_PROD_HTTPS_POOL=!YfBIFIzp65UBl+c0QCUGrw3uOK3bWc2j5+qnuv03gLL/tZPOMwJ/ZRY4nNpr2UyaqU4NFvt62vCNN9U=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "a37f814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 15:04:22 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js | 172.217.21.170 | 200 OK | 34 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js IP 172.217.21.170:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File typeASCII text, with very long lines (32077) Hash4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:44:29 GMT
expires: Fri, 06 Dec 2024 15:44:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 170394
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pro.paradigmnewsletters.org/p/Scripts/HideContent.js | 161.129.26.18 | 200 OK | 466 B |
URL GET HTTP/1.1pro.paradigmnewsletters.org/p/Scripts/HideContent.js IP 161.129.26.18:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39 ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashcc54a637e514fddfe0be2e7c2d062e5b a0f97813508d22d71f015b93cc8dfdcee65acdfd 580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true
DNT: 1
Connection: keep-alive
Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!2yEO8G37WBy4zAk0QCUGrw3uOK3bWZG5QAuU2dj5ymUykXfZqSuWxS4MZTuNzygjObnyqZa+FA6eDNI=; LAWNZ985=; BIGipServerIRIS_PROD_HTTPS_POOL=!YfBIFIzp65UBl+c0QCUGrw3uOK3bWc2j5+qnuv03gLL/tZPOMwJ/ZRY4nNpr2UyaqU4NFvt62vCNN9U=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 09 Dec 2023 15:04:22 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Oswald:wght@700&display=swap | 142.250.74.106 | 200 OK | 1.3 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Oswald:wght@700&display=swap IP 142.250.74.106:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File typegzip compressed data, max compression Hashf636614d23222ba5329b42926267f8ec f3f0611ce40077bbc5b303cbab266c5d9b077da2 30f5208fa12695cc7bd406f64a860a793a27100bf65176ba024afd7b42dd4b14
GET /css2?family=Open+Sans:wght@400;700&family=Oswald:wght@700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 09 Dec 2023 15:04:23 GMT
date: Sat, 09 Dec 2023 15:04:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.getblueshift.com/blueshift.js | 54.230.111.60 | 200 OK | 2.8 kB |
URL GET HTTP/1.1cdn.getblueshift.com/blueshift.js IP 54.230.111.60:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.getblueshift.com Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47 ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (6564), with no line terminators Hash859d16b4786a243736a9b219445eae43 e6dd4c8dcac4df40615338f1e7ecfe50c54aa0d5 393483170bc4a2319e51ea073f4e13b85185948301acce471b482094d11af7c7
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2805
Connection: keep-alive
Last-Modified: Tue, 21 Nov 2023 12:16:06 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 09 Dec 2023 14:33:31 GMT
Cache-Control: max-age=3600
ETag: "e7a548f293fa4dad39c906cae250b1ed"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Kok6JZv3hnks2itePja14GVxGzvwP6PQV-6PBM3ukV_UkEwQW2jdJA==
Age: 1853
|
|
| fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 | 216.58.207.227 | 200 OK | 13 kB |
URL GET HTTP/2fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 IP 216.58.207.227:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 12648, version 1.0 Hash5e79fc3b5fbdec47c02942523ae2bdbd fdb96db25dc07b7c0573bf5a66966d12dfbb41bd 6ecd2a103a7260474c3239da5f32a2f7cb999765d9ab12161f3e4abe3906316f
GET /s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12648
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Dec 2023 14:46:39 GMT
expires: Sat, 07 Dec 2024 14:46:39 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:38:40 GMT
content-type: font/woff2
age: 87464
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 216.58.207.227:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0 Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:00:58 GMT
expires: Fri, 06 Dec 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 209005
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 216.58.207.227:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0 Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:00:58 GMT
expires: Fri, 06 Dec 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 209005
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/proaejvpra.json | 151.101.194.132 | 200 OK | 1.6 kB |
URL GET HTTP/2fast.wistia.com/embed/medias/proaejvpra.json IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
Hash0644b7c382c45a8887328bfbde6b73bc a070e171ff3fc2fd2e926f16357776a2becd0789 f29a3a51bfad4a83dafa173a81e120332ef93744f25b10db3f1e7be080242e2e
GET /embed/medias/proaejvpra.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"f29a3a51bfad4a83dafa173a81e12033"
x-request-id: 7cccc2ca-2419-44dc-af51-bdff732793f8
x-runtime: 0.065141
content-encoding: br
x-envoy-upstream-service-time: 67
via: 1.1 a075746ea1824aa1c02a5e26a9e968e4.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: pAk-WnN7h-53MyjzsnKK2EN4Nb7lKbVV91I0MM6bLPZ8BHz-C5d1EA==
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:23 GMT
age: 60527
x-served-by: cache-iad-kcgs7200105-IAD, cache-bma1661-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 16, 1
x-timer: S1702134264.542722,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1648
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-P95MDDF | 142.250.74.136 | 200 OK | 106 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-P95MDDF IP 142.250.74.136:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (58522) Size106 kB (106363 bytes) Hashc59c1ef1226707add88823e998755163 edd74a6f9cbec3ef951b23d6c067b99faf776ccd 6ee400ef32fbc2ad72b72ee1a81ed192614f09d8eef1ff5d6b9a1e010989d48c
GET /gtm.js?id=GTM-P95MDDF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 15:04:23 GMT
expires: Sat, 09 Dec 2023 15:04:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 106363
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NKRVP76 | 142.250.74.136 | 200 OK | 111 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-NKRVP76 IP 142.250.74.136:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (56012) Size111 kB (110997 bytes) Hash3be7d7d8e095e103c7b006dafa0b1efc aa9ff7b6bfc24427d7604a2bec0ab9760afeb0d3 7bd0c5a4deaaf157af0d98cfd14c1ad8df1efd3e5b5c379d6f9f7110b44bb0f8
GET /gtm.js?id=GTM-NKRVP76 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 15:04:23 GMT
expires: Sat, 09 Dec 2023 15:04:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 110997
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg | 54.230.241.82 | 200 OK | 62 kB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg IP 54.230.241.82:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Hash1dc38080d6c9b9fd76a40a2c8c3f39fc 074548f7b26d805b2ce1a4806e8797285fee469d 4d48aae29e189eb89524b397fce6b1ae961719ea407b5409f612955baca8e69d
GET /AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 61582
server: nginx
date: Thu, 06 Jul 2023 22:34:12 GMT
last-modified: Mon, 26 Jun 2023 15:02:24 GMT
cache-control: max-age=31536000
expires: Fri, 05 Jul 2024 22:34:12 GMT
etag: "6499a880-f08e"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mHecX72CkCPd-7KTIi0geEe86hI17MKVg9UremckZSvju3H6Jnf1nw==
age: 13451411
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-play-icon.png | 54.230.241.82 | 200 OK | 318 B |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-play-icon.png IP 54.230.241.82:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePNG image data, 31 x 39, 8-bit/color RGBA, non-interlaced Hash120ca7c31817e6e137e2a807ddcddbe0 254f6b23b9b2d4c040decf505eac8b6a9296a1c6 dd5f84c4b871b07d787fe2709d47cdc18eee536bb2560c6f889256dd59c61b48
GET /AWN/exit-pop/exitpop-play-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 318
server: nginx
date: Mon, 18 Sep 2023 18:05:07 GMT
x-frame-options: sameorigin
x-accel-version: 0.01
last-modified: Fri, 15 Sep 2023 16:23:24 GMT
etag: "13e-6056836372650"
accept-ranges: bytes
cache-control: max-age=31536000
expires: Tue, 17 Sep 2024 18:05:07 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: SAMEORIGIN
x-powered-by: PleskLin
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qT3rrP31c5X4ahng0ilRIWSw8ijaBSDzwX4S1frXvIRAx9Ncp1KjuQ==
age: 7073956
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-warning-icon.png | 54.230.241.82 | 200 OK | 1.7 kB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-warning-icon.png IP 54.230.241.82:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePNG image data, 73 x 75, 8-bit/color RGBA, non-interlaced Hash40a8475cba41b161c3b142acc36b79e5 0da3639ed848b44a4efd71189e742a94b29280d4 186053f58f065437b88bc7ab02d4d48d7f203c61d615f81aa457b5f755d5a061
GET /AWN/exit-pop/exitpop-warning-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1716
server: nginx
date: Wed, 04 Oct 2023 13:28:12 GMT
last-modified: Fri, 15 Sep 2023 16:23:26 GMT
cache-control: max-age=31536000
expires: Thu, 03 Oct 2024 13:28:12 GMT
etag: "650484fe-6b4"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zSn2dlbY4baf9DXl01vzPmTAMOwjmSnv_-vKdeprrWmnn_K-xoetMQ==
age: 5708171
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-transcript-icon.png | 54.230.241.82 | 200 OK | 1.5 kB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-transcript-icon.png IP 54.230.241.82:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePNG image data, 50 x 53, 8-bit/color RGBA, non-interlaced Hashc94eaaf8ec2941b35a23421f193b8c2e 156681cbd7cf2836598e47d3eec86f7a9772bde8 5fea6317f0aeb6da5271e9a104032ab162521148ec32b93df3c77129fa39fe97
GET /AWN/exit-pop/exitpop-transcript-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1484
server: nginx
date: Mon, 18 Sep 2023 18:05:07 GMT
last-modified: Fri, 15 Sep 2023 16:23:23 GMT
cache-control: max-age=31536000
expires: Tue, 17 Sep 2024 18:05:07 GMT
etag: "650484fb-5cc"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VC5cYm8RMhO-pimyDqqn-GcHujuAxFF_9w_hvNRx2hP5EzqfzxKJbQ==
age: 7073956
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c | 142.250.74.136 | 200 OK | 93 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c IP 142.250.74.136:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (5955) Hashf67b17b37161b303c712618293770700 be9ff54bb7679d542883f5420b42348c2268a7fa 79eba25a4756e2d4e46b9e2bdf392da644b9afb51a53664a5e6662e6a848e0ec
GET /gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 15:04:23 GMT
expires: Sat, 09 Dec 2023 15:04:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92696
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fast.wistia.com/assets/external/googleAnalytics4.js | 151.101.194.132 | 200 OK | 4.2 kB |
URL GET HTTP/2fast.wistia.com/assets/external/googleAnalytics4.js IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File typeASCII text, with very long lines (16541) Hash9bbbdbdad3d0da00881800f39ed6ad8b 03563b32521b2a04dc6e7ba8b5f1fe21181be7f0 f47b95dbf3f004a7305cfe6c6b107d76dac597a4c50a52e3f33240f76e4598d5
GET /assets/external/googleAnalytics4.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "79bd690906b70d00bf740332ef800755"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:23 GMT
age: 3529
x-served-by: cache-iad-kcgs7200086-IAD, cache-bma1626-BMA
x-cache: HIT, HIT
x-cache-hits: 56, 3
x-timer: S1702134264.802314,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 4152
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 188.125.94.206 | 200 OK | 6.3 kB |
IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZrC5jaxGkCFjP8SGw+F8J9j7aNXsEN5lGOMSPC0yR8Stg1fHIjxF3nZkl6ESUefZeQiNE8+pGbo=
x-amz-request-id: TD9TQ15V8VA4AQ4J
date: Sat, 09 Dec 2023 14:36:01 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "5c6ed25dce803fd84288922b8928409e-df"
age: 1703
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 188.125.94.206 | 200 OK | 6.3 kB |
IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZrC5jaxGkCFjP8SGw+F8J9j7aNXsEN5lGOMSPC0yR8Stg1fHIjxF3nZkl6ESUefZeQiNE8+pGbo=
x-amz-request-id: TD9TQ15V8VA4AQ4J
date: Sat, 09 Dec 2023 14:36:01 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "5c6ed25dce803fd84288922b8928409e-df"
age: 1703
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 188.125.94.206 | 200 OK | 6.3 kB |
IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZrC5jaxGkCFjP8SGw+F8J9j7aNXsEN5lGOMSPC0yR8Stg1fHIjxF3nZkl6ESUefZeQiNE8+pGbo=
x-amz-request-id: TD9TQ15V8VA4AQ4J
date: Sat, 09 Dec 2023 14:36:01 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "5c6ed25dce803fd84288922b8928409e-df"
age: 1703
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| paradigmpressgroup.com/favicons/apple-touch-icon.png | 18.214.111.198 | 200 OK | 3.0 kB |
URL GET HTTP/2paradigmpressgroup.com/favicons/apple-touch-icon.png IP 18.214.111.198:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerLet's Encrypt Subjectparadigmpressgroup.com FingerprintAE:B7:D7:11:15:BA:76:70:3D:73:D7:75:77:C9:E5:A6:E2:9B:6F:5F ValidityFri, 10 Nov 2023 14:51:26 GMT - Thu, 08 Feb 2024 14:51:25 GMT
File typePNG image data, 180 x 180, 8-bit grayscale, non-interlaced Hashdd470648114adaceb47d36a18ad41d9d c93c69021ab4e381b4715938bed3732b132852b3 49dd5241fadc6a69795935a795804ed7206efb39f6dc6b5a0588f92d80775ad4
GET /favicons/apple-touch-icon.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 15:04:23 GMT
content-type: image/png
content-length: 3017
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"bc9-1823c06a3cb"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 188.125.94.206 | 200 OK | 6.3 kB |
IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZrC5jaxGkCFjP8SGw+F8J9j7aNXsEN5lGOMSPC0yR8Stg1fHIjxF3nZkl6ESUefZeQiNE8+pGbo=
x-amz-request-id: TD9TQ15V8VA4AQ4J
date: Sat, 09 Dec 2023 14:36:01 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "5c6ed25dce803fd84288922b8928409e-df"
age: 1703
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| paradigmpressgroup.com/favicons/favicon-16x16.png | 18.214.111.198 | 200 OK | 587 B |
URL GET HTTP/2paradigmpressgroup.com/favicons/favicon-16x16.png IP 18.214.111.198:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerLet's Encrypt Subjectparadigmpressgroup.com FingerprintAE:B7:D7:11:15:BA:76:70:3D:73:D7:75:77:C9:E5:A6:E2:9B:6F:5F ValidityFri, 10 Nov 2023 14:51:26 GMT - Thu, 08 Feb 2024 14:51:25 GMT
File typePNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced Hash2bb2efaa073e4987ba1867aff02ab3ac ea05acee8f408e3f86830b5f2da0616ced013006 6b712b83f2054506208f4243b57e7bd48fa0dcf3a10c0ff609bfc5ea8398ddc6
GET /favicons/favicon-16x16.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 15:04:23 GMT
content-type: image/png
content-length: 587
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"24b-1823c06a3cc"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1380292903.1702134271>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=794452905 | 142.250.74.35 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1380292903.1702134271>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=794452905 IP 142.250.74.35:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google.no FingerprintDB:33:6A:DD:DA:72:55:0D:55:09:60:6E:D1:5B:40:D8:2B:9B:4F:3C ValidityMon, 20 Nov 2023 08:12:16 GMT - Mon, 12 Feb 2024 08:12:15 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1380292903.1702134271>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=794452905 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 09 Dec 2023 15:04:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c | 142.250.74.136 | 200 OK | 84 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c IP 142.250.74.136:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (7711) Hashdcbf8cca93d6eeec3dbb37cb4b024f3c d3f3b4bc51332e75ea30319c46d421ede198388b e4d94f32cefb223ca57e9dfa3bee17f58cc4267fd3f9601ef44f1eaf9205ca0a
GET /gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 15:04:24 GMT
expires: Sat, 09 Dec 2023 15:04:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84043
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C | 142.250.74.136 | 200 OK | 84 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C IP 142.250.74.136:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (7711) Hash91871110e6fb9c96a1229677f7c3bb99 c7e4c616f916becb2c24d8ca7913bf59d1af0776 a67ab1d0f794be4ec36d77d14ef52490d8ee736a73da3806ce1e7b068ae8d149
GET /gtag/js?id=G-9JTVKL1Z3C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 15:04:24 GMT
expires: Sat, 09 Dec 2023 15:04:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84025
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| s.yimg.com/wi/config/10082412.json | 188.125.94.206 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10082412.json IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10082412.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: DKBBFKQ1HSK65WAN
x-amz-id-2: TJD2mraz1kqfdu7+vTB55jx9FghVFIevaoTCtzf23TNWzWXAAvs5P+J3y1rWoSFsT4bkzi6YvYo4FmAZlLospfj6oxnAP7Qf/mW9vZUbouc=
content-type: application/json
date: Sat, 09 Dec 2023 14:54:56 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 568
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10091245.json | 188.125.94.206 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10091245.json IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10091245.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: MH9TQK2D362KT2E1
x-amz-id-2: 0KwTYDBQiYXCHb0jak0fSQZ9Q/YIVAd9FSvOS47A59j7kZrOGQYRrjW0t0G9MhrKytCaVgPsVGcXsmjUESHkieLP4XqMHepJRKjw5PIuC0s=
content-type: application/json
date: Sat, 09 Dec 2023 14:34:41 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 1783
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10114794.json | 188.125.94.206 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10114794.json IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10114794.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: DKB3DTBHF07J6CCB
x-amz-id-2: prCroLmrHXMc7jg2xxb9u+/ByxtL6WTIUAdw2A/GpA1xrn4PhW2qEIHqq0EKTlT1sFvb5HGTuQ08qcBV6GQctg==
content-type: application/json
date: Sat, 09 Dec 2023 14:54:56 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 568
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Biden_0723.gif | 54.230.241.82 | 200 OK | 2.9 MB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Biden_0723.gif IP 54.230.241.82:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeGIF image data, version 89a, 600 x 338 Size2.9 MB (2862760 bytes) Hash560bb02b025c2be2be5e9dcdaa23b5a0 4be02d05ff68bfe008c6e3ad5f78e82df6ab5298 01459ccd649575e13bb099d789b906dede95e3569445e0877ad8ec57243f5449
GET /AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Biden_0723.gif HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 2862760
server: nginx
date: Tue, 08 Aug 2023 13:59:48 GMT
last-modified: Mon, 10 Jul 2023 19:21:21 GMT
cache-control: max-age=31536000
expires: Wed, 07 Aug 2024 13:59:48 GMT
etag: "64ac5a31-2baea8"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qrOm0S3YtnUyQlkU2TObOpgVHgt8d88-4x0eFu9qgFhiCbACWxdgDQ==
age: 10631076
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/playPauseLoadingControl.js | 151.101.194.132 | 200 OK | 21 kB |
URL GET HTTP/2fast.wistia.com/assets/external/playPauseLoadingControl.js IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File typeASCII text, with very long lines (65455) Hash31f0b908fbd5fc16bf6737c637b83178 26f5effe6525ca16ceb9815cb26776a8ac36f81c 863614886d87b0fbc5b99b2c002a8e382ab9161cacc1290006ea02e428e09747
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "b09d2ef450c9011369afee5fc7a5a161"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:24 GMT
age: 554
x-served-by: cache-iad-kjyo7100036-IAD, cache-bma1661-BMA
x-cache: HIT, HIT
x-cache-hits: 68, 12
x-timer: S1702134265.540373,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 21129
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10125189.json | 188.125.94.206 | 200 OK | 22 B |
URL GET HTTP/2s.yimg.com/wi/config/10125189.json IP 188.125.94.206:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerDigiCert Inc Subject*.api.fantasysports.yahoo.com Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10125189.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: VQKWS4T310BTMWDF
x-amz-id-2: CaTLQzVISdhXqjN7vXLE3yzSGJ2ODSOahbPpj5nB1AwlseG+dGoNa2RXL6a9oNBVqf2cLBNiPjc=
content-type: application/json
date: Sat, 09 Dec 2023 15:04:23 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-encoding: gzip
content-length: 22
age: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=1&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2244 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=1&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2244 IP 216.239.34.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=1&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2244 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 15:04:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=3&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2285 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=3&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2285 IP 216.239.34.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=3&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2285 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 15:04:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=2&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2271 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=2&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2271 IP 216.239.34.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=2&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Click%20Report&tfd=2271 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 15:04:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 143.204.55.3 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP 143.204.55.3:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 986
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Sat, 09 Dec 2023 15:04:24 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wZSU5i7idXu6mzFqsVFv1r1mKU2eo15bnYeHeBPVw9gtA5-Nrp5zTQ==
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=4&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=awn_aware&_c=1&tfd=2285 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=4&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=awn_aware&_c=1&tfd=2285 IP 216.239.34.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=4&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=awn_aware&_c=1&tfd=2285 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 15:04:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fast.wistia.com/assets/external/engines/hls_video.js | 151.101.194.132 | 200 OK | 118 kB |
URL GET HTTP/2fast.wistia.com/assets/external/engines/hls_video.js IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size118 kB (117668 bytes) Hash6e1e307293f078c95c07db8660ce607a 2a08bcf1166c9707485e568102f7c96e1f933b36 f0150171f993137d09210b10e0629ea4d57a465046ba791adb4bf4a2da978357
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "5258bd9b9f222d0dd6df0056cd2b7524"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:24 GMT
age: 760
x-served-by: cache-iad-kcgs7200099-IAD, cache-bma1661-BMA
x-cache: HIT, HIT
x-cache-hits: 64, 16
x-timer: S1702134265.685283,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 117668
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/images/blank.gif | 151.101.194.132 | 200 OK | 1.2 kB |
URL GET HTTP/2fast.wistia.com/assets/images/blank.gif IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File typeGIF image data, version 89a, 100 x 100 Hashfbdc4ed9a1e2ee4917a265306927bcf1 6d177725d8230df0457e72004080f712e26fe624 a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:24 GMT
age: 262
x-served-by: cache-iad-kcgs7200077-IAD, cache-bma1626-BMA
x-cache: HIT, HIT
x-cache-hits: 37, 10
x-timer: S1702134265.826168,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/proaejvpra.m3u8 | 151.101.194.132 | 200 OK | 758 B |
URL GET HTTP/2fast.wistia.com/embed/medias/proaejvpra.m3u8 IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
Hash2a4e4559920c8263242d644b386e01d6 f00611eb21e5ec80125bf94a5232aaa236174810 22c3966347173e619aed810217d2ceb48d595b8ad49f391b3fec84e1400a0590
GET /embed/medias/proaejvpra.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"22c3966347173e619aed810217d2ceb4"
x-request-id: 84ffbd28-b1d0-4c64-8dc4-ad2aa7c4ab3d
x-runtime: 0.036313
x-envoy-upstream-service-time: 38
via: 1.1 10a9e9969f05a75cc05e6f70b8499f7e.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: TZjyRT8N69dHN38Zd--VAm6gynfIFk9p3VbjrNPsDS8o3_jljXHmeg==
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:24 GMT
age: 39
x-served-by: cache-iad-kjyo7100127-IAD, cache-bma1661-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 1754, 1
x-timer: S1702134265.834797,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 758
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8 | 143.204.55.51 | 200 OK | 114 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8 IP 143.204.55.51:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.wistia.com FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03 ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
Size114 kB (114053 bytes) Hashfbad419048953b789daaf102ea77c1f0 45da563a39aefb49dee084da889a3a53ba8c669f b2802e5f5180830c1fe9a32ad28a872d171466f13f47562d7e275ac3dd556a4d
GET /deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 114053
server: envoy
date: Tue, 05 Dec 2023 07:41:57 GMT
expires: Wed, 04 Dec 2024 07:41:57 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
surrogate-key: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 335
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qkRk7sE5_f0LynIoSw5ivXhM8r2K2AcvpARgRq9cgkbyEEgsOTc7wA==
age: 372147
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8/seg-1-v1-a1.ts | 143.204.55.51 | 200 OK | 927 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8/seg-1-v1-a1.ts IP 143.204.55.51:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.wistia.com FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03 ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File typeMPEG transport stream data Size927 kB (926840 bytes) Hashe456fd001793139e55bdc0b5ac5d13f0 44708eac468a0d809ee890e27bf732e480d25886 ff62073afa299b289e96fcc74d92a3cfe50bef680f4c700237f3bdc65e823d57
GET /deliveries/e8b37c064b8df38997baabe74e65450d89db6493.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 926840
server: envoy
date: Tue, 05 Dec 2023 12:23:49 GMT
expires: Wed, 04 Dec 2024 12:23:49 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
surrogate-key: e8b37c064b8df38997baabe74e65450d89db6493-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 818
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Y_JuV5HwekK4qSMoPanYCpF6_-vBx7SoZa9MDF-V8a29SyClJsQWyA==
age: 355235
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/d96b0bae11894fc5bf01f51d8f529473a4f00828.m3u8 | 143.204.55.51 | 200 OK | 114 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/d96b0bae11894fc5bf01f51d8f529473a4f00828.m3u8 IP 143.204.55.51:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.wistia.com FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03 ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
Size114 kB (114053 bytes) Hashe50cb06a3110b4ed76e6c7b787b0f222 3308e3525bcc516eab01e940cd843ec6be44da84 215c947becd470b83177ac24212e467a3e0a4764e46ce3671332b546ae6ccde4
GET /deliveries/d96b0bae11894fc5bf01f51d8f529473a4f00828.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 114053
server: envoy
date: Tue, 05 Dec 2023 07:41:23 GMT
expires: Wed, 04 Dec 2024 07:41:23 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: d96b0bae11894fc5bf01f51d8f529473a4f00828-hls-segment
surrogate-key: d96b0bae11894fc5bf01f51d8f529473a4f00828-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 307
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X8NS0z04nLUcvS2qbXhK6QoPiq2cnuAy43VQN4Wman-MxqfREDixKg==
age: 372182
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| distillery.wistia.com/x | 54.230.111.90 | 204 No Content | 0 B |
IP 54.230.111.90:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subjectstats-tap-production-cloudfront-app-cname.wistia.com Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40 ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1846
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Dec 2023 15:04:25 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 2
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7uPzibQl_RG0iTPdV6iZScAJGJrVBndoOEWvq_6tLJT2wv-KvM96cA==
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/allIntegrations.js | 151.101.194.132 | 200 OK | 5.8 kB |
URL GET HTTP/2fast.wistia.com/assets/external/allIntegrations.js IP 151.101.194.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46 ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File typeASCII text, with very long lines (23371) Hash9a9248fb8178a9640de37511b065850f 086459b7f718251f753b82cee05f51c6ca2d3a84 fb7f597f64e9b0c17f7f99fb577f164c36f93f13ffda2ccb736b786e4e705d12
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2de48c3cd29dd8ca8c43042875b49727"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sat, 09 Dec 2023 15:04:25 GMT
age: 469
x-served-by: cache-iad-kcgs7200101-IAD, cache-bma1661-BMA
x-cache: HIT, HIT
x-cache-hits: 65, 8
x-timer: S1702134266.537588,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 5774
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 143.204.55.3 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP 143.204.55.3:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1530
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Sat, 09 Dec 2023 15:04:25 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uDGDOY5W7SGl3DF8acWn02EChHvZwS8pfbVOB6qEg_cgmlXU4XY98Q==
X-Firefox-Spdy: h2
|
|
| api.getblueshift.com/unity.gif?t=1702134273&e=pageload&r=&z=194424&x=59976d352f424c4b27d325518576b9b2&k=c5ee8eae-2048-6aa8-18fc-e3f9c9c269a7&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue | 52.40.78.89 | 200 OK | 42 B |
URL GET HTTP/2api.getblueshift.com/unity.gif?t=1702134273&e=pageload&r=&z=194424&x=59976d352f424c4b27d325518576b9b2&k=c5ee8eae-2048-6aa8-18fc-e3f9c9c269a7&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue IP 52.40.78.89:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerAmazon Subject*.getblueshift.com Fingerprint53:0D:6B:AE:94:24:EE:BE:0F:BD:6E:C6:61:2F:FD:37:71:D2:21:0F ValidityThu, 09 Mar 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1702134273&e=pageload&r=&z=194424&x=59976d352f424c4b27d325518576b9b2&k=c5ee8eae-2048-6aa8-18fc-e3f9c9c269a7&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 15:04:26 GMT
content-type: image/gif
content-length: 42
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://pro.paradigmnewsletters.org
access-control-expose-headers: etag
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&_s=5&tfd=7898 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&_s=5&tfd=7898 IP 216.239.34.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday6m_0923/LAWNZ985/?cake_s1=12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&_s=5&tfd=7898 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 173
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 15:04:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=6&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Engagement&tfd=12119 | 216.239.34.36 | | 0 B |
URL region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=6&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Engagement&tfd=12119 IP 216.239.34.36:0
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1702134270149&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1380292903.1702134271&ul=en-us&sr=1280x1024&_s=6&sid=1702134270&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday6m_0923%2FLAWNZ985%2F%3Fcake_s1%3D12_145734530_9deafee2-1bbe-4e0a-ae88-f69786473bf5%26h%3Dtrue&dt=Saudi%20Arabia%20Planning%20A%20New%20Attack%20On%20America&en=Engagement&tfd=12119 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Sat, 09 Dec 2023 15:04:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| click.thedailymoneytips.com/sadoomsday6mf1023/82dd8b2f17dd1f146d4f3cda90d58384/48/1990834045/139350/6957ba18feb5c33b553f6ad514ca900e/63293 | 188.114.97.1 | 302 Found | 0 B |
URL User Request GET HTTP/2click.thedailymoneytips.com/sadoomsday6mf1023/82dd8b2f17dd1f146d4f3cda90d58384/48/1990834045/139350/6957ba18feb5c33b553f6ad514ca900e/63293 IP 188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectthedailymoneytips.com Fingerprint79:EC:85:19:05:49:AD:6B:8A:A1:90:4E:B9:8D:91:79:4B:F6:6C:79 ValidityWed, 25 Oct 2023 16:41:13 GMT - Tue, 23 Jan 2024 16:41:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /sadoomsday6mf1023/82dd8b2f17dd1f146d4f3cda90d58384/48/1990834045/139350/6957ba18feb5c33b553f6ad514ca900e/63293 HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 15:04:19 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=82dd8b2f17dd1f146d4f3cda90d58384&product=32827&ar=48&cid=139350&lid=6957ba18feb5c33b553f6ad514ca900e&slhash=63293&mtaid=[s7]&cid2=[s8]
cache-control: max-age=600
expires: Sat, 09 Dec 2023 15:14:18 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eM4McQ%2BGmbvJXArEk%2FjU2d6p9VKu9yBlQsJK%2FbIFpCzLrGy2FxZrnpygH85OrBfTtWwjZvJu%2Bw4BR4IrKEmZPANqje2P0frXPtMqzGqS%2BpfyALyNGJt2P%2Bd35speM4XlG%2B4ixvesWJMsjAK8oy0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 832e23caaae356a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|