links.goodlifestylenews.com/a/1610/click/2404/217880/2fefe708623c5c659e0ad82c89ef19d6841964af/949dba64bdd771298ee58d91a9877f2809fb1d5e
35.238.129.105302 Found 207 B URL User Request GET HTTP/1.1 links.goodlifestylenews.com/a/1610/click/2404/217880/2fefe708623c5c659e0ad82c89ef19d6841964af/949dba64bdd771298ee58d91a9877f2809fb1d5e
IP 35.238.129.105:443
Certificate IssuerLet's Encrypt
Subjectlinks.goodlifestylenews.com
Fingerprint6B:80:95:BD:77:FD:C0:26:F2:2A:D4:48:9D:61:FC:31:B0:E3:18:15
ValidityMon, 13 Nov 2023 07:41:12 GMT - Sun, 11 Feb 2024 07:41:11 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 09cfc65d7c88d1515b9b47ccb9cd3e80
17fdc2309aec32130f2b0b0aaa88fa9d187a9e61
3c72b45a04b1725950390fb0941518c3af99f253b1038ae0060b8dc2adcc6f5d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a/1610/click/2404/217880/2fefe708623c5c659e0ad82c89ef19d6841964af/949dba64bdd771298ee58d91a9877f2809fb1d5e HTTP/1.1
Host: links.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-type: text/html; charset=utf-8
transfer-encoding: chunked
status: 302 Found
cache-control: no-cache
vary: Origin
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: db5a4008-911d-45ed-ad60-84a3ce020198
location: https://go.goodlifestylenews.com/bidenbucks07/fe382c14351cbb190c3c7ce9c3d49fa0/55/leadsource/2404/1610/2a7d0dc3807b408d8f6c5e08abe0b807/mpmta
x-download-options: noopen
x-runtime: 0.030561
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 20:16:05 GMT
set-cookie: _session_id=69dc9d8e31d1bec8b60e341e4c7bf21f; path=/; expires=Fri, 08 Dec 2023 08:16:05 GMT; HttpOnly
x-powered-by: Phusion Passenger 5.3.7
server: nginx/1.22.1 + Phusion Passenger(R) 6.0.18
470kwc1.com/clk.trk?CID=444145&AFID=430135&SID=3415259331988349927
18.190.20.10302 Found 134 B URL User Request GET HTTP/2 470kwc1.com/clk.trk?CID=444145&AFID=430135&SID=3415259331988349927
IP 18.190.20.10:443
Certificate IssuerAmazon
Subject470kwc1.com
FingerprintC8:F6:48:19:9F:92:B8:B3:78:6A:46:25:3A:C3:80:8E:21:07:B3:C6
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /clk.trk?CID=444145&AFID=430135&SID=3415259331988349927 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 07 Dec 2023 20:16:07 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://470kwc1.com:443/clk.trk?CID=444145&AFID=430135&SID=3415259331988349927
links.goodlifestylenews.com/
35.238.129.105 0 B URL links.goodlifestylenews.com/
IP 35.238.129.105:0
Certificate IssuerLet's Encrypt
Subjectlinks.goodlifestylenews.com
Fingerprint6B:80:95:BD:77:FD:C0:26:F2:2A:D4:48:9D:61:FC:31:B0:E3:18:15
ValidityMon, 13 Nov 2023 07:41:12 GMT - Sun, 11 Feb 2024 07:41:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: links.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 308 Permanent Redirect
content-length: 0
location: https://links.goodlifestylenews.com/
go.goodlifestylenews.com/bidenbucks07/fe382c14351cbb190c3c7ce9c3d49fa0/55/leadsource/2404/1610/2a7d0dc3807b408d8f6c5e08abe0b807/mpmta
172.67.172.49302 Found 216 B URL User Request GET HTTP/2 go.goodlifestylenews.com/bidenbucks07/fe382c14351cbb190c3c7ce9c3d49fa0/55/leadsource/2404/1610/2a7d0dc3807b408d8f6c5e08abe0b807/mpmta
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash da8d2582d7fc28a544b835f9dbfa59f6
f1644d7e736fed0db35df794024626d4e3f5f2e4
4a7d8f247a75ad06bf5aab6ce8142056ad8c99b730a44b6cd67f0bb172eb58f2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bidenbucks07/fe382c14351cbb190c3c7ce9c3d49fa0/55/leadsource/2404/1610/2a7d0dc3807b408d8f6c5e08abe0b807/mpmta HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 07 Dec 2023 20:16:06 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=fe382c14351cbb190c3c7ce9c3d49fa0&product=2674&ar=55&cid=2404&lid=1610&slhash=2a7d0dc3807b408d8f6c5e08abe0b807&mtaid=mpmta&cid2=[s8]
cache-control: max-age=600
expires: Thu, 07 Dec 2023 20:26:06 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d5d%2BSITe6GbE13o3pU0jtF7rcQAwMIncfyLyEDP7YRfFs4qMbx0kCmG29EmorCUbV5NkhIWeuBrzuZGY9XxaS38%2FiiHsSU6%2BNaqPaBQjB3OcFLGkxJR9Nd0D18y0LQlwQ3ooueUQ%2B2YTxK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831f71c5ec8956c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
links.goodlifestylenews.com/
35.238.129.105 90 B URL links.goodlifestylenews.com/
IP 35.238.129.105:0
Certificate IssuerLet's Encrypt
Subjectlinks.goodlifestylenews.com
Fingerprint6B:80:95:BD:77:FD:C0:26:F2:2A:D4:48:9D:61:FC:31:B0:E3:18:15
ValidityMon, 13 Nov 2023 07:41:12 GMT - Sun, 11 Feb 2024 07:41:11 GMT
File type HTML document, ASCII text
Hash 01f4771c47a56dbdf77642c80eb9b799
6aead125925ec84c9171e3b29b9c2fc00682bda5
eec0a51a966b712aaccd11df320373becc55f174b97030419f9fae79f0cf542c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: links.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 Bad request
content-length: 90
cache-control: no-cache
content-type: text/html
connection: close
pro.paradigm-press.info/m/2052764?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2
192.135.136.169301 Moved Permanently 256 B URL User Request GET HTTP/1.1 pro.paradigm-press.info/m/2052764?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2
IP 192.135.136.169:443
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a9d8e95c4b70fa508c451aa1364c4775
32195fc16c41c6f76ca9ce5d17afb7348b04ef5d
7d55a2aeb34d29669f28161a86a9948fbe09a1a23c2a33bd03cdd8ef3827a0d5
GET /m/2052764?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2 HTTP/1.1
Host: pro.paradigm-press.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Date: Thu, 07 Dec 2023 20:16:08 GMT
Content-Length: 256
Set-Cookie: 2052764=2421080; expires=Wed, 27-Dec-2023 20:16:09 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!39SmmCx+6lt2AM40QCUGrw3uOK3bWRPhzRZuCfeFFVyNm2Fdij8OtDhkG3Z3PGc2zX3B8OcS6BMb7gs=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
161.129.26.18200 OK 11 kB URL User Request GET HTTP/1.1 pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
IP 161.129.26.18:443
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1672), with CRLF, LF line terminators
Hash 44433428c92b30db80c4ab0fad68a22d
7a0e8179aca731ebd8aa8d519fecb7e8134c61ed
32b4a6d21563ff6555f45205875103d8e223ce7b5fafd4228c3475acaeb5ee20
GET /p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 07 Dec 2023 20:16:09 GMT
Content-Length: 10829
Set-Cookie: LAWNY7AX=; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!PqBmDPxY5oli2Qo0QCUGrw3uOK3bWf6upSBu1arBkzEwdQ0JEF4PwtLvwayQX8/dMkJaTgud8ndsqK4=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
browser.sentry-cdn.com/7.14.0/bundle.tracing.min.js
151.101.2.217200 OK 25 kB URL GET HTTP/2 browser.sentry-cdn.com/7.14.0/bundle.tracing.min.js
IP 151.101.2.217:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subject*.sentry-cdn.com
FingerprintF4:BF:96:D1:20:5D:BA:52:63:EB:1F:F7:56:39:FA:81:01:A3:64:DE
ValidityTue, 01 Aug 2023 14:42:24 GMT - Sun, 01 Sep 2024 14:42:23 GMT
File type ASCII text, with very long lines (65429)
Hash b1a7a1b922a4979ae3414123594bdc9f
7cf9514e86b46e19347ebdb04e686ae9b954b800
4848b910fc25c8ee7e9fa21fd42380399adc16075748f9c29b5290b256256e6c
GET /7.14.0/bundle.tracing.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 09 Oct 2024 15:25:46 GMT
last-modified: Wed, 28 Sep 2022 12:12:25 GMT
etag: "5d7bd7b4bd3e1985565195a6b7303da3"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:10 GMT
age: 2704762
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 25261
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/E-v1.js
151.101.2.132200 OK 129 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65474)
Size 129 kB (129063 bytes)
Hash 126858c9f3376ca1bc419aa2a2d0af28
51e06cde2e8cc415d06c63e144e6c36d2c95270d
78cf6679aa583fd97b9700d6dafa7e791d7861b72d173df807b5f8f27d246877
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2dfa35fa3c2d63da5bfe8edd5f3cb8df"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:10 GMT
age: 1154
x-served-by: cache-iad-kiad7000039-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 75, 4
x-timer: S1701980171.794896,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 129063
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
142.250.74.138200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP 142.250.74.138:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:44:29 GMT
expires: Fri, 06 Dec 2024 15:44:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 16301
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pro.paradigmnewsletters.org/p/Scripts/Common.js
161.129.26.18200 OK 1.1 kB URL GET HTTP/1.1 pro.paradigmnewsletters.org/p/Scripts/Common.js
IP 161.129.26.18:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 2fa1e7a35bfa376eff7f1426fc4a8afa
008b48dbd95a158542969743c18d0bc33e0a9384
857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
DNT: 1
Connection: keep-alive
Cookie: LAWNY7AX=; BIGipServerIRIS_PROD_HTTPS_POOL=!PqBmDPxY5oli2Qo0QCUGrw3uOK3bWf6upSBu1arBkzEwdQ0JEF4PwtLvwayQX8/dMkJaTgud8ndsqK4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "a37f814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 07 Dec 2023 20:16:09 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
pro.paradigmnewsletters.org/p/Scripts/HideContent.js
161.129.26.18200 OK 466 B URL GET HTTP/1.1 pro.paradigmnewsletters.org/p/Scripts/HideContent.js
IP 161.129.26.18:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking6.pubsvs.com
Fingerprint5D:9B:A2:DC:1F:DA:F9:4F:9E:55:AD:AA:D5:50:57:BB:B7:C3:50:39
ValidityFri, 17 Nov 2023 17:49:52 GMT - Thu, 15 Feb 2024 17:49:51 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash cc54a637e514fddfe0be2e7c2d062e5b
a0f97813508d22d71f015b93cc8dfdcee65acdfd
580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
DNT: 1
Connection: keep-alive
Cookie: LAWNY7AX=; BIGipServerIRIS_PROD_HTTPS_POOL=!PqBmDPxY5oli2Qo0QCUGrw3uOK3bWf6upSBu1arBkzEwdQ0JEF4PwtLvwayQX8/dMkJaTgud8ndsqK4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 07 Dec 2023 20:16:09 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
cdn.getblueshift.com/blueshift.js
54.230.111.60200 OK 2.8 kB URL GET HTTP/1.1 cdn.getblueshift.com/blueshift.js
IP 54.230.111.60:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (6564), with no line terminators
Hash 859d16b4786a243736a9b219445eae43
e6dd4c8dcac4df40615338f1e7ecfe50c54aa0d5
393483170bc4a2319e51ea073f4e13b85185948301acce471b482094d11af7c7
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2805
Connection: keep-alive
Last-Modified: Tue, 21 Nov 2023 12:16:06 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 07 Dec 2023 19:33:23 GMT
Cache-Control: max-age=3600
ETag: "e7a548f293fa4dad39c906cae250b1ed"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7LULiTbazhRBL4ndL22Jrduj6lzX_ZFBAnW20k0Nk5kDRDrsCf0OJg==
Age: 2569
www.googletagmanager.com/gtm.js?id=GTM-P95MDDF
142.250.74.168200 OK 106 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P95MDDF
IP 142.250.74.168:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (58522)
Size 106 kB (106351 bytes)
Hash 55c8ef8c27c2546f70f0b4728aea5504
d846ee4f5901c50a7626464811a91dafc1e98d7a
8778dc049af54f749b1010981cf1f519b40612d841021df9a84d7b98edd75572
GET /gtm.js?id=GTM-P95MDDF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 20:16:11 GMT
expires: Thu, 07 Dec 2023 20:16:11 GMT
cache-control: private, max-age=900
last-modified: Thu, 07 Dec 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 106351
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NKRVP76
142.250.74.168200 OK 111 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NKRVP76
IP 142.250.74.168:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (56012)
Size 111 kB (110997 bytes)
Hash 9a02270233572e28358e3fc8de36f315
d126676e7bd05f7b88d99e6404f37c6c52ba0ccf
9299dcf4beba4e7ddf5f97a20ce7e8e2e25d3c6d71439db975c1e30fc13cc633
GET /gtm.js?id=GTM-NKRVP76 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 20:16:11 GMT
expires: Thu, 07 Dec 2023 20:16:11 GMT
cache-control: private, max-age=900
last-modified: Thu, 07 Dec 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 110997
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:33 GMT
expires: Fri, 06 Dec 2024 15:40:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 16538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d1u56hvpilpmef.cloudfront.net/TFP/Images/AWN/AWN_BidenBox_Img_49554621123.webp
54.230.241.191200 OK 3.2 kB URL GET HTTP/2 d1u56hvpilpmef.cloudfront.net/TFP/Images/AWN/AWN_BidenBox_Img_49554621123.webp
IP 54.230.241.191:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 206x205, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6120ceb5726db39a95b95981591c0b09
0882ce9a1ce8503017342cd82ff22396bb09f142
6afe27acc47883408890ade05c2465e931ebf61908e6142c163ed5eb275886a0
GET /TFP/Images/AWN/AWN_BidenBox_Img_49554621123.webp HTTP/1.1
Host: d1u56hvpilpmef.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 3202
server: nginx
date: Thu, 07 Dec 2023 01:59:18 GMT
last-modified: Thu, 30 Jun 2022 14:45:33 GMT
cache-control: max-age=172800
expires: Sat, 09 Dec 2023 01:59:18 GMT
etag: "62bdb70d-c82"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Dc-R3tnoz7dpRZ5VdDWctaplVI_JaESDocvwPf_7Gqjok9UDGirr7A==
age: 65812
X-Firefox-Spdy: h2
d1u56hvpilpmef.cloudfront.net/TFP/Images/AWN/AWN_BidenBox_24HourSurveillance_HL_Background-01.webp
54.230.241.191200 OK 95 kB URL GET HTTP/2 d1u56hvpilpmef.cloudfront.net/TFP/Images/AWN/AWN_BidenBox_24HourSurveillance_HL_Background-01.webp
IP 54.230.241.191:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1125, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56b528f2e1be1d42c3600e3f72398bd5
f93185a7bcd9f96c5fae3df4bb820d43d1a9c762
9609810e08ef213a6c7aa1d19000878ffe00bd5b2066304d6d9d176cc1acf29d
GET /TFP/Images/AWN/AWN_BidenBox_24HourSurveillance_HL_Background-01.webp HTTP/1.1
Host: d1u56hvpilpmef.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 95094
server: nginx
last-modified: Thu, 30 Jun 2022 14:45:33 GMT
x-powered-by: PleskLin
accept-ranges: bytes
date: Thu, 07 Dec 2023 04:28:53 GMT
cache-control: max-age=172800
expires: Sat, 09 Dec 2023 04:28:53 GMT
etag: "62bdb70d-17376"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KmI2fIHQMbuTrkzs45fM4FjJHQLjiQpsDh5NNBzdipb24hDrKS-Rdw==
age: 56838
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/1rufykcqew.json
151.101.2.132200 OK 1.6 kB URL GET HTTP/2 fast.wistia.com/embed/medias/1rufykcqew.json
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type JSON data\012- , ASCII text, with very long lines (5513), with no line terminators
Hash 59fa4e7c952517294eb91f863e2f926e
4c788020bab3d75636a071c7a4cb24f7c9949133
e1b5945e5e4e437e0189ee60ba59d419ed3c4fe19aaf0712733a7e92186b9e51
GET /embed/medias/1rufykcqew.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"e1b5945e5e4e437e0189ee60ba59d419"
x-request-id: e4e99ebf-add9-449d-b3b8-eefc07903ac2
x-runtime: 0.062414
content-encoding: br
x-envoy-upstream-service-time: 64
via: 1.1 b471d3775e81a9be536b52b99f39452a.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: L0EzSVo4QkGjckPkm4XYNnlQkp9POkZTU38Ln4N9yc2oQWZ0kQ2nsA==
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:11 GMT
age: 78116
x-served-by: cache-iad-kiad7000043-IAD, cache-bma1668-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 709, 1
x-timer: S1701980171.352249,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1587
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/googleAnalytics4.js
151.101.2.132200 OK 4.2 kB URL GET HTTP/2 fast.wistia.com/assets/external/googleAnalytics4.js
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (16541)
Hash 9bbbdbdad3d0da00881800f39ed6ad8b
03563b32521b2a04dc6e7ba8b5f1fe21181be7f0
f47b95dbf3f004a7305cfe6c6b107d76dac597a4c50a52e3f33240f76e4598d5
GET /assets/external/googleAnalytics4.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "79bd690906b70d00bf740332ef800755"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:11 GMT
age: 1153
x-served-by: cache-iad-kcgs7200086-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 56, 2
x-timer: S1701980171.430759,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 4152
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c
142.250.74.168200 OK 93 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 801c14dcbd9b98865c8e0a491b49582b
e01d014b691e2d172b21fb308c557bd4c17bfabb
c6d073096f801199506a167a63cce18c06106f83c901704ad2ee2f16d25f5298
GET /gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 20:16:11 GMT
expires: Thu, 07 Dec 2023 20:16:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92633
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.yimg.com/wi/ytc.js
87.248.119.252200 OK 6.3 kB IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: aWp/F0xv0L3gjpK5usBoFgO5PzuIeBPlyMkaWOtwnt/5xlkRAzG40Lu6ODeswYwIeEkmZ52XJdM=
x-amz-request-id: 1RHBCFEHX9SR4CK5
date: Thu, 07 Dec 2023 20:15:52 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 20
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.252200 OK 6.3 kB IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: aWp/F0xv0L3gjpK5usBoFgO5PzuIeBPlyMkaWOtwnt/5xlkRAzG40Lu6ODeswYwIeEkmZ52XJdM=
x-amz-request-id: 1RHBCFEHX9SR4CK5
date: Thu, 07 Dec 2023 20:15:52 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 20
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.252200 OK 6.3 kB IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: aWp/F0xv0L3gjpK5usBoFgO5PzuIeBPlyMkaWOtwnt/5xlkRAzG40Lu6ODeswYwIeEkmZ52XJdM=
x-amz-request-id: 1RHBCFEHX9SR4CK5
date: Thu, 07 Dec 2023 20:15:52 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 20
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.252200 OK 6.3 kB IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: aWp/F0xv0L3gjpK5usBoFgO5PzuIeBPlyMkaWOtwnt/5xlkRAzG40Lu6ODeswYwIeEkmZ52XJdM=
x-amz-request-id: 1RHBCFEHX9SR4CK5
date: Thu, 07 Dec 2023 20:15:52 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 20
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1
X-Firefox-Spdy: h2
d2z65klgtz99km.cloudfront.net/AWN/AWN_bidenbucks_0622/BidenWalkingToPodium_CTP_720px.gif
54.230.241.180200 OK 2.2 MB URL GET HTTP/2 d2z65klgtz99km.cloudfront.net/AWN/AWN_bidenbucks_0622/BidenWalkingToPodium_CTP_720px.gif
IP 54.230.241.180:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 720 x 479\012- DOS/MBR boot sector\012- DOS/MBR boot sector\012- data
Size 2.2 MB (2224542 bytes)
Hash a63bf2ba4e1e40b598beca4d8fceb232
4fc8d36c0e67457339e2d4018b8659b42d137521
30c514a0e324ba22ffb8662aef7a3bababaff722a22aa63ffaec5a2470651ed3
GET /AWN/AWN_bidenbucks_0622/BidenWalkingToPodium_CTP_720px.gif HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 2224542
server: nginx
date: Tue, 16 May 2023 11:21:08 GMT
last-modified: Thu, 16 Jun 2022 19:23:08 GMT
cache-control: max-age=31536000
expires: Wed, 15 May 2024 11:21:08 GMT
etag: "62ab831c-21f19e"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P6mHQGEsH_3D2EvmnSQkB5Uilc1lKUmxZmhbIuxEGKLOZVkmqD54nA==
age: 17744102
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=550987025.1701980178>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=261171472
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=550987025.1701980178>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=261171472
IP 142.250.74.163:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=550987025.1701980178>m=45je3bt0v9122066590z878323495&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=261171472 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 07 Dec 2023 20:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10114794.json
87.248.119.252200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10114794.json
IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10114794.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 51ZVM3EQNSVGNYV2
x-amz-id-2: xXaiV4kE8skOnw7ga+Zp8pGBK/LFh0+swqxR8mmnpjB67HxC3tkBz4EoIyujfWG6teYNIrF3BLI=
content-type: application/json
date: Thu, 07 Dec 2023 19:37:44 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 2308
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10082412.json
87.248.119.252200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10082412.json
IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10082412.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 7BFXGMFK9ED0ANXM
x-amz-id-2: KRToyU9+poIjEyP+mRP90sLIrFDGWIClo/I6910hY2DbjjoFrGLaK+C8lVy2WcBngb2GIxCmNvA5oFAPwJYeqc6WecEE4HrLPz2a32PAnAg=
content-type: application/json
date: Thu, 07 Dec 2023 19:54:51 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 1281
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10125189.json
87.248.119.252200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10125189.json
IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10125189.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 51ZM617YM7W53Y9A
x-amz-id-2: aT/+oiaX3I1ZDwrEibuVNg/IWGOGmjUXGdE1dDdqVwkvgwM9wNBm9iw9yzZC+dlQtU6ULPOzXX8=
content-type: application/json
date: Thu, 07 Dec 2023 19:37:44 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 2308
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c
142.250.74.168200 OK 84 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (7711)
Hash 2cff257abb4f06a9f8eab69be3dc7327
28a8aed28fc464751dd94e6310052dd652c8eec0
c05398cbc615a7751007ab45a0a7b9fdffb2636a2503fb94a127a5ae9bfdc42c
GET /gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 20:16:12 GMT
expires: Thu, 07 Dec 2023 20:16:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84043
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C
142.250.74.168200 OK 84 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C
IP 142.250.74.168:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (7711)
Hash 1464002dcfe7f576911ecc8d5dd71706
2d261bf69b06c344230b30262ed4acf924f6132d
06df85fff7690faeab7a298de0b9be56a1f85293385a7da5f4146013e5888d35
GET /gtag/js?id=G-9JTVKL1Z3C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 20:16:12 GMT
expires: Thu, 07 Dec 2023 20:16:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84025
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.yimg.com/wi/config/10091245.json
87.248.119.252200 OK 22 B URL GET HTTP/2 s.yimg.com/wi/config/10091245.json
IP 87.248.119.252:443
ASN #203220 Yahoo! UK Services Limited
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10091245.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: 9T9S0TGN0P4SJ75V
x-amz-id-2: vC8UaXPze0TD4lCDyDTDQ4bsxF5SYn/pfut1EzR1sOmqUVhzg8kag+vXi5YGiGVdfNHBbzpGwYTHzda61W2rFUF0BaCR3LW5i4OL/JIeobY=
content-type: application/json
date: Thu, 07 Dec 2023 20:16:12 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 0
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
151.101.2.132200 OK 21 kB URL GET HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65455)
Hash 31f0b908fbd5fc16bf6737c637b83178
26f5effe6525ca16ceb9815cb26776a8ac36f81c
863614886d87b0fbc5b99b2c002a8e382ab9161cacc1290006ea02e428e09747
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "b09d2ef450c9011369afee5fc7a5a161"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:12 GMT
age: 1155
x-served-by: cache-iad-kjyo7100036-IAD, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 68, 34
x-timer: S1701980172.148723,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 21129
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/engines/hls_video.js
151.101.2.132200 OK 118 kB URL GET HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 118 kB (117668 bytes)
Hash 6e1e307293f078c95c07db8660ce607a
2a08bcf1166c9707485e568102f7c96e1f933b36
f0150171f993137d09210b10e0629ea4d57a465046ba791adb4bf4a2da978357
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "5258bd9b9f222d0dd6df0056cd2b7524"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:12 GMT
age: 1155
x-served-by: cache-iad-kcgs7200099-IAD, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 64, 20
x-timer: S1701980172.186211,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 117668
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=1&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6483
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=1&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6483
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=1&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6483 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=2&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Click%20Report&tfd=6502
216.239.32.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=2&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Click%20Report&tfd=6502
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=2&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Click%20Report&tfd=6502 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pipedream.wistia.com/mput?topic=metrics
143.204.55.51200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.51:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subjectpipedream-production-cloudfront-app-cname.wistia.com
Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 991
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Thu, 07 Dec 2023 20:16:12 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qppGLDMfjGNXjTM9YzfpUfguCevaeCuEVRPFw2vOSJGq9Xcbk0NrRw==
X-Firefox-Spdy: h2
paradigmpressgroup.com/favicons/apple-touch-icon.png
18.214.111.198200 OK 3.0 kB URL GET HTTP/2 paradigmpressgroup.com/favicons/apple-touch-icon.png
IP 18.214.111.198:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerLet's Encrypt
Subjectparadigmpressgroup.com
FingerprintAE:B7:D7:11:15:BA:76:70:3D:73:D7:75:77:C9:E5:A6:E2:9B:6F:5F
ValidityFri, 10 Nov 2023 14:51:26 GMT - Thu, 08 Feb 2024 14:51:25 GMT
File type PNG image data, 180 x 180, 8-bit grayscale, non-interlaced\012- data
Hash dd470648114adaceb47d36a18ad41d9d
c93c69021ab4e381b4715938bed3732b132852b3
49dd5241fadc6a69795935a795804ed7206efb39f6dc6b5a0588f92d80775ad4
GET /favicons/apple-touch-icon.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 20:16:12 GMT
content-type: image/png
content-length: 3017
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"bc9-1823c06a3cb"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
paradigmpressgroup.com/favicons/favicon-16x16.png
18.214.111.198200 OK 587 B URL GET HTTP/2 paradigmpressgroup.com/favicons/favicon-16x16.png
IP 18.214.111.198:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerLet's Encrypt
Subjectparadigmpressgroup.com
FingerprintAE:B7:D7:11:15:BA:76:70:3D:73:D7:75:77:C9:E5:A6:E2:9B:6F:5F
ValidityFri, 10 Nov 2023 14:51:26 GMT - Thu, 08 Feb 2024 14:51:25 GMT
File type PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Hash 2bb2efaa073e4987ba1867aff02ab3ac
ea05acee8f408e3f86830b5f2da0616ced013006
6b712b83f2054506208f4243b57e7bd48fa0dcf3a10c0ff609bfc5ea8398ddc6
GET /favicons/favicon-16x16.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 20:16:12 GMT
content-type: image/png
content-length: 587
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"24b-1823c06a3cc"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/1rufykcqew.m3u8
151.101.2.132200 OK 756 B URL GET HTTP/2 fast.wistia.com/embed/medias/1rufykcqew.m3u8
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
Hash 1362e31aae9ca8bae718fa0f24d01986
21cd55d7f10b581edeb0cea17d20f990e58a3fbc
32e854945a087d465bb4ad5d8b9464a5e9982686be9c82128e2dbdd3becd72b0
GET /embed/medias/1rufykcqew.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"32e854945a087d465bb4ad5d8b9464a5"
x-request-id: e9b65a6a-f7c4-48a9-b572-9c7e863d1b35
x-runtime: 0.037295
x-envoy-upstream-service-time: 38
via: 1.1 b471d3775e81a9be536b52b99f39452a.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: 5a8-qtZu4jJR0NKriyCzc3WMLnvPfoifsH2gRmFkj7dyMSTCpy7BWw==
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:12 GMT
age: 60701
x-served-by: cache-iad-kiad7000099-IAD, cache-bma1668-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 71479, 1
x-timer: S1701980172.413253,VS0,VE8
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 756
X-Firefox-Spdy: h2
fast.wistia.com/assets/images/blank.gif
151.101.2.132200 OK 1.2 kB URL GET HTTP/2 fast.wistia.com/assets/images/blank.gif
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:12 GMT
age: 3040
x-served-by: cache-iad-kcgs7200077-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 37, 88
x-timer: S1701980172.421894,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=3&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Click%20Report&tfd=6512
216.239.32.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=3&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Click%20Report&tfd=6512
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=3&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Click%20Report&tfd=6512 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=4&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=awn_aware&_c=1&tfd=6513
216.239.32.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=4&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=awn_aware&_c=1&tfd=6513
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=4&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=awn_aware&_c=1&tfd=6513 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
embed-cloudfront.wistia.com/deliveries/e4927814fafa377755c224f60b53238d927ce15d.m3u8
143.204.55.103200 OK 72 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/e4927814fafa377755c224f60b53238d927ce15d.m3u8
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
Hash 5ea72dd57c0027ac837efb11aef97bf6
461026c5faedad21427ab30c0a9a9457e2d80154
f8a8748738d084743695994a71839fa3e4545778fa50a02519566d7e8ab6aff7
GET /deliveries/e4927814fafa377755c224f60b53238d927ce15d.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 72208
server: envoy
date: Sat, 18 Nov 2023 13:40:17 GMT
expires: Sun, 17 Nov 2024 13:40:17 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: e4927814fafa377755c224f60b53238d927ce15d-hls-segment
surrogate-key: e4927814fafa377755c224f60b53238d927ce15d-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 134
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GVLQyaUOWmdR3AMGTMd0kJMr8-Tg-OeAd0qDKocxAFvCeLdSAr6DAQ==
age: 1665355
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/e4927814fafa377755c224f60b53238d927ce15d.m3u8/seg-1-v1-a1.ts
143.204.55.103200 OK 391 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/e4927814fafa377755c224f60b53238d927ce15d.m3u8/seg-1-v1-a1.ts
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type MPEG transport stream data\012- data
Size 391 kB (391416 bytes)
Hash 39ff12665fa6e0d145c7620dad33942b
8fe84a7c2003f38c84a5527f5fbdc635c6e36266
b6cf135886a58376f38e332db78e65331a55bf384a325c6c5ba3d8bddd371648
GET /deliveries/e4927814fafa377755c224f60b53238d927ce15d.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 391416
server: envoy
date: Sat, 02 Dec 2023 07:48:31 GMT
expires: Sun, 01 Dec 2024 07:48:31 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: e4927814fafa377755c224f60b53238d927ce15d-hls-segment
surrogate-key: e4927814fafa377755c224f60b53238d927ce15d-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 130
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HrSeFpeTBDewy7WSZgYY2SvgzjJEBiz1M4OEKrVZor6Q6wehufCyBQ==
age: 476861
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
distillery.wistia.com/x
54.230.111.55204 No Content 0 B IP 54.230.111.55:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subjectstats-tap-production-cloudfront-app-cname.wistia.com
Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40
ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1746
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 07 Dec 2023 20:16:12 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 3
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cpz2oCdYJ_CJ4GLidyDEDj1ChRMp2rvYDLpxl-Oh1-H_3Q4ESqifPA==
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/0fc2fba1d0d13bb29b4913b53de8d471b6340fc3.m3u8
143.204.55.103200 OK 72 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/0fc2fba1d0d13bb29b4913b53de8d471b6340fc3.m3u8
IP 143.204.55.103:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
Hash fdebd04d2b72bbbc6cbefe1de322b577
db104a384bda6bb6a315d411e86a75d3499ac407
828f76c254029fce9bb1a3464c7d6f5594f62486d3d84c3e2e5362d3335358fa
GET /deliveries/0fc2fba1d0d13bb29b4913b53de8d471b6340fc3.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 72208
server: envoy
date: Fri, 01 Dec 2023 13:55:11 GMT
expires: Sat, 30 Nov 2024 13:55:11 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 0fc2fba1d0d13bb29b4913b53de8d471b6340fc3-hls-segment
surrogate-key: 0fc2fba1d0d13bb29b4913b53de8d471b6340fc3-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 90
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DNzHVwadvq5rgRRypq1bpnpfzimOQNvOQWuIDoGf7gSgQH1X3TRfBA==
age: 541261
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
o1147369.ingest.sentry.io/api/4503902855102464/envelope/?sentry_key=39a81e4de95a40d283d30db3dc35a252&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.14.0
34.120.195.249200 OK 41 B URL POST HTTP/2 o1147369.ingest.sentry.io/api/4503902855102464/envelope/?sentry_key=39a81e4de95a40d283d30db3dc35a252&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.14.0
IP 34.120.195.249:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerDigiCert Inc
Subjectingest.sentry.io
Fingerprint60:82:0B:58:64:CD:37:FD:3F:C0:84:4F:0B:69:CF:58:05:15:97:9A
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e7d1613c7008797c5fdf34d7e0c4d1d0
4b6c6dbef83be3ed17d92ceef235757b4eeab186
0d6ec7250d591c086ef6e6ba615b4400d88aa57e1e8a086cd8307f85939bccce
POST /api/4503902855102464/envelope/?sentry_key=39a81e4de95a40d283d30db3dc35a252&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.14.0 HTTP/1.1
Host: o1147369.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/
Content-Type: text/plain;charset=UTF-8
Content-Length: 10764
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 20:16:12 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
143.204.55.51200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.51:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subjectpipedream-production-cloudfront-app-cname.wistia.com
Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1526
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Thu, 07 Dec 2023 20:16:13 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
server: envoy
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VeXJH0Vr_CuHBIRUZ4yQeUepONuh1lWKZKoBgYfJVwlUgb0keCsrAA==
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
151.101.2.132200 OK 5.8 kB URL GET HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP 151.101.2.132:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (23371)
Hash 9a9248fb8178a9640de37511b065850f
086459b7f718251f753b82cee05f51c6ca2d3a84
fb7f597f64e9b0c17f7f99fb577f164c36f93f13ffda2ccb736b786e4e705d12
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2de48c3cd29dd8ca8c43042875b49727"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 20:16:13 GMT
age: 1156
x-served-by: cache-iad-kcgs7200101-IAD, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 65, 22
x-timer: S1701980173.161325,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 5774
X-Firefox-Spdy: h2
api.getblueshift.com/unity.gif?t=1701980180&e=pageload&r=&z=720234&x=59976d352f424c4b27d325518576b9b2&k=1df43536-feb6-a248-353c-34336d974d3f&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue
44.226.101.178200 OK 42 B URL GET HTTP/2 api.getblueshift.com/unity.gif?t=1701980180&e=pageload&r=&z=720234&x=59976d352f424c4b27d325518576b9b2&k=1df43536-feb6-a248-353c-34336d974d3f&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue
IP 44.226.101.178:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
Fingerprint53:0D:6B:AE:94:24:EE:BE:0F:BD:6E:C6:61:2F:FD:37:71:D2:21:0F
ValidityThu, 09 Mar 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1701980180&e=pageload&r=&z=720234&x=59976d352f424c4b27d325518576b9b2&k=1df43536-feb6-a248-353c-34336d974d3f&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 20:16:13 GMT
content-type: image/gif
content-length: 42
access-control-expose-headers: etag
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://pro.paradigmnewsletters.org
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&_s=5&tfd=12064
216.239.32.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&_s=5&tfd=12064
IP 216.239.32.36:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&_s=5&tfd=12064 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 173
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=6&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Engagement&tfd=16288
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=6&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Engagement&tfd=16288
IP 216.239.32.36:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z878323495&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=6&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Engagement&tfd=16288 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=7&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Engagement&tfd=17242
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=7&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Engagement&tfd=17242
IP 216.239.32.36:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je3bt0v9122066590z8811578897&_p=1701980177488&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=550987025.1701980178&ul=en-us&sr=1280x1024&_s=7&sid=1701980178&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_bidenbuckstac_1022%2FLAWNY7AX%2F%3Fcake_s1%3D12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2%26h%3Dtrue&dt=Biden%20Signs%20Order%20for%2024-7%20Surveillance%20of%20all%20US%20Citizens%3F&en=Engagement&tfd=17242 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Thu, 07 Dec 2023 20:16:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
verifiedwebpage.com/go?ehash=fe382c14351cbb190c3c7ce9c3d49fa0&product=2674&ar=55&cid=2404&lid=1610&slhash=2a7d0dc3807b408d8f6c5e08abe0b807&mtaid=mpmta&cid2=[s8]
188.114.96.1302 Found 27 kB URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=fe382c14351cbb190c3c7ce9c3d49fa0&product=2674&ar=55&cid=2404&lid=1610&slhash=2a7d0dc3807b408d8f6c5e08abe0b807&mtaid=mpmta&cid2=[s8]
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=fe382c14351cbb190c3c7ce9c3d49fa0&product=2674&ar=55&cid=2404&lid=1610&slhash=2a7d0dc3807b408d8f6c5e08abe0b807&mtaid=mpmta&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 07 Dec 2023 20:16:07 GMT
content-type: text/html; charset=UTF-8
location: http://470kwc1.com/clk.trk?CID=444145&AFID=430135&SID=3415259331988349927
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=9c0b9c1d4fecdf60b89d852665078d71; path=/
pixel_session_hash_2674=3415259331988349927; expires=Sat, 06-Jan-2024 20:16:06 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_2674=13830b4c368ba3f721050d550fd3c2a53c111a0b1da08c91d57ff74577692c89; expires=Sat, 09-Dec-2023 20:16:06 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2r517INS6ssBdlDADgNZuXeLUV1i3gEjRpjRN80Fv3GzvJ7cmZaJTSWo8xLjN5fGK%2Fc1VNVYkGFD0OkOi4W83HMVJLMy962BIsx6IYopEdTWJB84Jq5HSUclhf%2BOFZDVOQVz5FmU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831f71cb486e569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Lato&family=Lora:wght@400;700&display=swap
142.250.74.106200 OK 4.2 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Lato&family=Lora:wght@400;700&display=swap
IP 142.250.74.106:443
Requested by https://pro.paradigmnewsletters.org/p/awn_bidenbuckstac_1022/LAWNY7AX/?cake_s1=12_144484060_9ebe5fbe-cf8c-4b4f-beef-66b7fd658bb2&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (4329), with no line terminators
Hash 41f84c767e9a8f7e5349a4c8e7254d21
4d28b9d68a849b7d9bd57ca8390f4f6d8ac3d185
0a7f188cd43ecb0b3d6c2abb6b9863e4ae460f88e2599ac7da25140dcd8d1930
GET /css2?family=Lato&family=Lora:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 20:16:10 GMT
date: Thu, 07 Dec 2023 20:16:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2