go.goodlifestylenews.com/
172.67.172.49 143 B URL go.goodlifestylenews.com/
IP 172.67.172.49:0
File type HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 00:52:03 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFua6zpjOFb%2BPkqdauGkl9pLPYRUsYksrIvCML4WJuZdXn7mf3sbP54IbTjHSk9pLQp%2FH8Crn8iUUFlkLeud6YpmKQSJ78UScTrmMiyEQxbx1%2FkAOE%2B0Lq%2BrOB6p505eL%2FH1PXiz6lq1%2BQ0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879a5920fbcf7127-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
172.67.172.49200 OK 7.6 kB URL User Request GET HTTP/1.1 subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
IP 172.67.172.49:80
File type HTML document, Unicode text, UTF-8 text, with very long lines (393)
Hash 408f059ed1eeeb6f538dc59b77bfcf58
31181e43a64c95774d39f887e71de3728ad756c6
784f6aab256573c0f1d206527016eb4560acf9cad3eadeeb83f015241ec859d0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ae12eb0a41a392eb93289b40bb6e1591
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 00:52:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DehVCYTJ%2FYwxg2fE1aqruuPX2AQNex2%2FhcBpc6GKNoMmwUR7rBCpQaLuYdiES7Axn2XFwJneTAdxAtl1qV16HMF8JxOY7CBKfXbwpreSpHDocZxVMAuCh8mqFRFYHj4f86xEkFhgVlp9%2BZcCUuyB2rr5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879a5924ee0656c0-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
subscribe.goodlifestylenews.com/jquery.caret.js
172.67.172.49200 OK 716 B URL GET HTTP/1.1 subscribe.goodlifestylenews.com/jquery.caret.js
IP 172.67.172.49:80
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 35c3ec8db4ff6e862db42516436216a1
7d9d7731403868cc34edaad1d9e17311541a6f77
adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Cookie: PHPSESSID=ae12eb0a41a392eb93289b40bb6e1591
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 00:52:05 GMT
Content-Type: application/javascript
Content-Length: 716
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Wed, 22 May 2024 10:49:42 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 223342
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mi9uXFiqFxVb7wmyKexRa66G1TmsqVf7at%2B1snBUxU2B7nHn%2F3wj8O9AiMZ7VOsvQaoH5hfk4wCDuyWPG6tyu6AzMGiVIMdRC3h2dojAyrNy89goKP%2FM2blDBk5JdVoNg%2BjOnz2Nm%2Flha7Yn%2F6tx0hz9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879a592d58cd56c0-OSL
alt-svc: h2=":443"; ma=60
subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
104.21.30.61200 OK 4.4 kB URL GET HTTP/1.1 subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
IP 104.21.30.61:80
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
File type JavaScript source, ASCII text
Hash 0dbbb5873b895ea3be425af219cf85de
7b9dba563376d7dbd1c5b9b7064ab87eadad5591
02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Cookie: PHPSESSID=ae12eb0a41a392eb93289b40bb6e1591
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 00:52:05 GMT
Content-Type: application/javascript
Content-Length: 4430
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Wed, 22 May 2024 10:49:42 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 223342
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PeFjxCSPOPMdcdJF3pKnBoBlDO1KsyayWRidLUtK%2BnJGHA6YFssvjqxnPqfYe8HqJW61juDAnSSwfK2YFWeurJzOuKes7DPwG5dCt%2BkBqjvwhtqLRdCcgDJ%2B37LaP5eTPwWHBXV7Ot8KL4GCa9i6%2BqZ2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 879a592d6b11b503-OSL
alt-svc: h2=":443"; ma=60
subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
104.21.66.20200 OK 144 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1
ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3
Size 144 kB (144253 bytes)
Hash e7eb0da863b2d3ead5846cdc3263a233
138225ea3d8ff08f07b046b858bf46bf2bba2e96
ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 00:52:05 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dhFUGFkRzb64m8fNhVwdxImxCZI1z4u7zLa2J3%2Fb%2BBKspVD2VmBxizpdmEqSo%2Bktj8zrQnp42QZLv6fowD1x8B3nHGO%2BIjhlj0PEnjGf%2Fl3aWExRTQFho8RUsATqSOMM6g6m%2Bo%2FrVOw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879a592dacb756aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
104.21.66.20200 OK 400 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1
ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3
Size 400 kB (400505 bytes)
Hash b9a9621a927a5b9a9c71fdbb53bf8991
9c4cc398edb33da6a79e62701867cbf7fed4056d
d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 00:52:05 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nNOCvQOZZ8BFhfj%2FBZmOIOCvWkHyQhZ5bY0e%2BM8FXVJAuinJrfT8T6i67F%2Fgzi6Q9%2F%2BPaf%2FrfZNn1b6Nmd%2FdC4wVIjw0u83lEBY7bivromdl7KoE6Zk2RQbPwCG3aKjjDst0Sss%2Fugw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879a592dacb856aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
142.250.74.42200 OK 33 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP 142.250.74.42:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File type JavaScript source, ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 12:01:54 GMT
expires: Sun, 20 Apr 2025 12:01:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 391811
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
151.101.193.229200 OK 30 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP 151.101.193.229:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Thu, 25 Apr 2024 00:52:05 GMT
age: 20651898
x-served-by: cache-fra-eddf8230072-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
142.250.74.168200 OK 101 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
IP 142.250.74.168:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Size 101 kB (100605 bytes)
Hash 1cd11560a8efac98643d7f79809c7acc
1e6b2851751a1934c619c7c918aad2363b0c63f1
4c93301ce052320d7a354af1b69a1407417a303af100bd4ab3680302375eeb48
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 00:52:05 GMT
expires: Thu, 25 Apr 2024 00:52:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100605
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
104.21.66.20200 OK 1.1 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1
ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3
Size 1.1 MB (1114284 bytes)
Hash b02e84cdcd5a3e55ded5e64dfd307124
bfaad4b8b4b1b1fafffeda314b8868c94e7280c8
d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 00:52:05 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FhbRPlF3b9ZhHnNAeOK5cRviKSHSK59K8oBulaR4ypciTeRoL98cZzbhlZUSQtkyVs4Vl9YirEn46cltg3xy9dv9wN6Tuldiq0SW6c9wnUrtzlNC5YDZqWOq6TaRmH%2FGdtf4Ed4pcG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879a592dacb956aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
151.101.193.229200 OK 17 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP 151.101.193.229:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (60201)
Hash c5236e5d6a5d0ff97ff8c8e5102c6c03
6fbfdbddbe85c578de559adcc8d07cccbc16d514
87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Thu, 25 Apr 2024 00:52:05 GMT
age: 4926429
x-served-by: cache-fra-etou8220032-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
104.21.66.20200 OK 1.3 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintDA:EE:DE:64:E3:D6:C6:7B:68:0D:DF:8D:B3:56:E9:59:2C:55:00:E1
ValidityFri, 08 Mar 2024 02:01:15 GMT - Thu, 06 Jun 2024 02:01:14 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3
Size 1.3 MB (1288007 bytes)
Hash 91e68c3d20f4e55b01fdbaa834b4e4e6
e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f
3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 00:52:05 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jB9IBXGlWc2PH%2FutfLk8notPQ3QmmE4zenZwUSgaR2ZdnKnrBx8R1IbEPZB1TQTaBr2TmijEVVOa6gcIGy9Vu3UY4bRnJDkcVC4pL0xNzYoceF%2FMm%2F2tfhZjFBLC%2F3cZzGwwmNhZ7hI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879a592dacbe56aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
104.26.8.206302 Found 251 B URL GET HTTP/1.1 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 104.26.8.206:80
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
File type HTML document, ASCII text
Hash 73816d82cca56c187674258ec5b7bd5a
cd989502a8b941226bb7e5ddc0ff0b62621e701f
cc2b540f494c9f0eb7c7f31880eec48518729e92ffa9e7081eb70193baa985a5
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 25 Apr 2024 00:52:05 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
Cache-Control: max-age=14400
Expires: Thu, 25 Apr 2024 01:01:56 GMT
CF-Cache-Status: HIT
Age: 7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WwlfsT9GEK25Qo88VkNLt3nLwFFWrD2WLZNNf0QWmw%2BYM8tkkB7Vt51ecJUJCA6FySr%2BtrRPVXE7qnrY%2FjkZKnzj9%2FYN2qUDXzz9KKw7l5lnV4hvoYySzbinsuiwHJAXDLhIPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879a592f6be0b503-OSL
alt-svc: h2=":443"; ma=60
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
104.26.8.206302 Found 36 kB URL GET HTTP/1.1 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 104.26.8.206:80
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
File type PNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced
Hash 724c1e2ab214eefe0271ee598af8749a
b99bb085dd791488b061c423223318345c590f24
bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 00:52:06 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Tue, 21 May 2024 23:01:10 GMT
cf-cache-status: HIT
age: 265856
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxtFOyUYja0tSJa5zhkgqBgzOuPtPfW7e7u75Tav5YyLfQXG%2F%2FZMoPH4FhBD9%2FwZTBtuv8eJG8xih737tDRj1jCwLyyhNx2EIKcHb5%2F2Ff9k6A5jhMNo4qHZTcgVaAH1iNX60A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879a59323fb356b1-OSL
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/2247354510_63e1747cce.jpgf09444872835755b90f965f52f490f4e17131789843abfd6de27a67e7b2b6426fded4dd539
52.216.219.152200 OK 32 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/2247354510_63e1747cce.jpgf09444872835755b90f965f52f490f4e17131789843abfd6de27a67e7b2b6426fded4dd539
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 500x302, components 3
Hash 4ebb2ee699dd8aeab370904eb7276538
de0ffafc1e93f8554fd6f9d500f8b8eecc2887bb
c44b4e50ffa06078ffcdb875594dc135ac58cee3f45fac8784c40dff6226f5ef
GET /autonewsuploads/2247354510_63e1747cce.jpgf09444872835755b90f965f52f490f4e17131789843abfd6de27a67e7b2b6426fded4dd539 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: rBgU+BHhwaOV4mIkmUjjOlM5wyIXOLCyHxzOlft+/gDbSezVxohvSuHQoFZ7e5oar+W0x78eQ1o=
x-amz-request-id: 5P40YFVW1JJVHN0G
Date: Thu, 25 Apr 2024 00:52:06 GMT
Last-Modified: Mon, 15 Apr 2024 11:03:06 GMT
ETag: "4ebb2ee699dd8aeab370904eb7276538"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 31813
fonts.googleapis.com/css?family=Roboto
142.250.74.106200 OK 16 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto
IP 142.250.74.106:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File type gzip compressed data, max compression
Hash 9f9378ebc8d16665fb807df5d685a8ad
2c207ca6c604de07efa0c2d0a78d9c1a26a9bd4e
e01b7c234a2a031d86832260067f329188a0ef6563dcd5833987592c6bd299c2
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 00:52:05 GMT
date: Thu, 25 Apr 2024 00:52:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/kenedy.jpg72a451ca4e67b2ba9db556a7e95fd29217083436375959836f109ae0c75e1b6aa9472372e8
52.216.219.152200 OK 58 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/kenedy.jpg72a451ca4e67b2ba9db556a7e95fd29217083436375959836f109ae0c75e1b6aa9472372e8
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 627x476, components 1
Hash b8c549ca81f90afd2dda82589683da77
d4dc43080a82a7349c2f4d5d8ab56f2223fbe1bf
919ae6a60cad4e42cecd1cf9d29d3ce1e16c8ccb635d0f331c2bc312e1661aed
GET /autonewsuploads/kenedy.jpg72a451ca4e67b2ba9db556a7e95fd29217083436375959836f109ae0c75e1b6aa9472372e8 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 6B4ROwQDtAn3YUDHARnrjjpFwsNcseitd6S0zuJjry6qYi19JltVQzMbRFuKHHkFyZkgnmq74JA=
x-amz-request-id: 5P41P15657N4GBZ9
Date: Thu, 25 Apr 2024 00:52:06 GMT
Last-Modified: Mon, 19 Feb 2024 11:53:59 GMT
ETag: "b8c549ca81f90afd2dda82589683da77"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 57874
s3.us-east-1.amazonaws.com/autonewsuploads/download%20(1).jpg298e50f742517900623f639efea37fd51708949598e017e1948fb38e4f29a8061aaba1ccec
52.216.219.152200 OK 6.6 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/download%20(1).jpg298e50f742517900623f639efea37fd51708949598e017e1948fb38e4f29a8061aaba1ccec
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 295x171, components 3
Hash 18e107165669fa8cf612fefdf7621525
21380c0498c431005f59782afe92bc50aa68ef63
d20ed4fb179f7131ba314b7710e99334af069f3e45765152c24045aa68e09771
GET /autonewsuploads/download%20(1).jpg298e50f742517900623f639efea37fd51708949598e017e1948fb38e4f29a8061aaba1ccec HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: w/7CSRHVFnCOWWdMos1vs8wI5BkHyVScmXjFgdf8xtFFrjrc9XJWRta/25+uSXFqKHXWifP3ILw=
x-amz-request-id: 3RJDP23FWKTG745C
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Mon, 26 Feb 2024 12:13:20 GMT
ETag: "18e107165669fa8cf612fefdf7621525"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 6633
s3.us-east-1.amazonaws.com/autonewsuploads/drinking-98618_1280.jpg64b9888da2f455dab6320067862a3aca17129195312d5cf1686f59b8fe0453612e08b8250c
52.216.219.152200 OK 159 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/drinking-98618_1280.jpg64b9888da2f455dab6320067862a3aca17129195312d5cf1686f59b8fe0453612e08b8250c
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1280x1280, components 3
Size 159 kB (158571 bytes)
Hash 7ce5ed9adc66e64ba075efb968d14738
6fdc90fa71a9caa1ab837ef5a1bf29abfbd0498d
1514eaed03038f21ece918a59349483f95ef337541818017d701c58d397fe326
GET /autonewsuploads/drinking-98618_1280.jpg64b9888da2f455dab6320067862a3aca17129195312d5cf1686f59b8fe0453612e08b8250c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 31BVQ9xEKLrWFZN2pNcgGNjlaL9vu4GxIpSNvLBeG/6oOfKGScKokMsaWMR3lZ9xYl3n7/dwH9w=
x-amz-request-id: 5P478QVBT9KEDE1H
Date: Thu, 25 Apr 2024 00:52:06 GMT
Last-Modified: Fri, 12 Apr 2024 10:58:53 GMT
ETag: "7ce5ed9adc66e64ba075efb968d14738"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 158571
s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90
52.216.219.152200 OK 130 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x550, components 3
Size 130 kB (130538 bytes)
Hash 81ed4e278b514ede42a3fa0bc59ae812
79ea6edc5c2326a174f137cdb092754eafa20d3f
bc9da136ab9d91bdf0e1a667dd123f362fa5ab2dd7f2ee22c9aaff3ebd619588
GET /autonewsuploads/0_xMIObdsLB7XPfX6M.jpg831e6c0cac9852ee802169b318eafcc21703851588ea1d7d0705a741428b565fef908b1c90 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: IRv/4+9Rba4VTSDhRh1HhwYF1M3U8xrsbPt9oeEpiOhJeRjOM57QEfCnFjxa3Epy64JWHo6D5z0=
x-amz-request-id: 3RJ49XCY2RBB523C
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Fri, 29 Dec 2023 12:06:30 GMT
ETag: "81ed4e278b514ede42a3fa0bc59ae812"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 130538
s3.us-east-1.amazonaws.com/autonewsuploads/silicon-valley-bank-svb-696x391.jpg40d86096b513af5fb6b62d4adc15f8551701260093ffc78a6207d8aade4d748dae6478fb31
52.216.219.152200 OK 69 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/silicon-valley-bank-svb-696x391.jpg40d86096b513af5fb6b62d4adc15f8551701260093ffc78a6207d8aade4d748dae6478fb31
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 696x391, components 3
Hash fa1f99e9ffb1cb56f6202d5bbf335f79
77864286b7c71b8670bf94f03134df6a009aabec
0fb64f41262e961a43e15d99a5461253cfcd4b57c554000678ed73aafd4edc6d
GET /autonewsuploads/silicon-valley-bank-svb-696x391.jpg40d86096b513af5fb6b62d4adc15f8551701260093ffc78a6207d8aade4d748dae6478fb31 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: +Q+WGooBbI85gS3sj1xMOLao1ylUWiKu0RoUDOtS+rgpRN/7ZiZ9obDYVaBc9rLNX7zkJl3Tz8M=
x-amz-request-id: 3RJ13Q3GNYABB81N
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Wed, 29 Nov 2023 12:14:52 GMT
ETag: "fa1f99e9ffb1cb56f6202d5bbf335f79"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 68794
s3.us-east-1.amazonaws.com/autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417
52.216.219.152200 OK 74 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1000x668, components 3
Hash 7fe2d33d531815585c8c1d4c5867d4a3
35500f4fa795b49f47137c0532ab07e600d82f8c
e295b46a6cabf7a1d9a053ad5cd21a7a610c44cfaf7eee8b46638a554fc27b73
GET /autonewsuploads/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvbHIvc2s4MDQ4LWltYWdlLWt3dnVreG9tLmpwZw.jpge7f332881ff283b6829e94415993a95d17132665016cdca8a23789d4b3362512373eef3417 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Txoe9eLVMPjq19QBZFpFAnbmPA9LZyse9ZTRejAnWoRdNrVx8M824zZx22SgjByIA3jThOYQ3cY=
x-amz-request-id: 3RJ58RKDC0C5AA0K
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Tue, 16 Apr 2024 11:21:44 GMT
ETag: "7fe2d33d531815585c8c1d4c5867d4a3"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 73918
s3.us-east-1.amazonaws.com/autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg
52.216.219.152200 OK 133 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10], baseline, precision 8, 1024x771, components 3
Size 133 kB (132852 bytes)
Hash 5687439e1978bd7fdad82d8d9b40589a
caf45e2235d11748a944e68abdb2c797eaf1caf7
a612c05d44abfdec6f7a49b2848057039b7d4fb6b75178f0a228893cba3b4d04
GET /autonewsuploads/0.099067001676806324SMRFedCtrl0223.jpg HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 7jLtoMbGNw9Lf3camMT2pHqR4NTLEcqSXTadTGcJfBqaKNsrCRAgMPWXY26oiws3SB3oFsSvISk=
x-amz-request-id: 3RJ400RVY5Z3ZWPE
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Wed, 08 Mar 2023 14:22:23 GMT
ETag: "5687439e1978bd7fdad82d8d9b40589a"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 132852
s3.us-east-1.amazonaws.com/autonewsuploads/arabia%20usa.pngb0ed32c65098ce22b30bb667b5cc036c1713269997c4b1f4e8a949202618a8b70ba3220078
52.216.219.152200 OK 352 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/arabia%20usa.pngb0ed32c65098ce22b30bb667b5cc036c1713269997c4b1f4e8a949202618a8b70ba3220078
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type PNG image data, 750 x 394, 8-bit/color RGBA, non-interlaced
Size 352 kB (351664 bytes)
Hash 23eeb8656d2d4f1f751c9ac7325b026d
93c54a0b2d11c5372eb46ccf5a7adcc55797b334
bbc434f9e9f658270d337d0eb636ccb4d141d5aee2d2536882062365fe88011b
GET /autonewsuploads/arabia%20usa.pngb0ed32c65098ce22b30bb667b5cc036c1713269997c4b1f4e8a949202618a8b70ba3220078 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: B2k/+AvImE4KoKqCWA/vJj6GVl0l2oFweAhMqnlc0ZGHq6FgW1Wu+i3z9as5Q4Z+k90DUU1nhrA=
x-amz-request-id: 3RJCW4SJ4WQV1GYK
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Tue, 16 Apr 2024 12:19:58 GMT
ETag: "23eeb8656d2d4f1f751c9ac7325b026d"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 351664
s3.us-east-1.amazonaws.com/autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83
52.216.219.152200 OK 821 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83
IP 52.216.219.152:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, description=080904-N-5319A-008.WASHINGTON (Sept. 4, 2008) The Pentagon Memorial honoring the 184 people killed at the Pentagon and on Ameri, xresolution=584, yresolution=592, resolutionunit=2], baseline, precision 8, 1920x1277, components 3
Size 821 kB (821039 bytes)
Hash 7184f186cfd51da8559a56f5a7e5164c
d9b1172c47b82d6849daec72442894c3a8c0243a
2b6d8566da4ef1d7a5c9d6215a4132e1b8679013904237f994f611eb2aa4665b
GET /autonewsuploads/1920px-US_Navy_080904-N-5319A-008_The_Pentagon_Memorial_honoring_the_184_people_killed_at_the_Pentagon_and_on_American_Airlines_flight_77.jpg3299f6cbb96f820d455e6441d6c9261216971996016bc768fbc08e0167162011e11cc78c83 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: bV73OPKo9WDhRJ6SGg3ewvhd8ST+hT+C46E2iTMujB9mrOE/LSFmrCicW1fyGwErirBI5wvF19s=
x-amz-request-id: 3RJCGBR9DYHXM4NJ
Date: Thu, 25 Apr 2024 00:52:07 GMT
Last-Modified: Fri, 13 Oct 2023 12:20:02 GMT
ETag: "7184f186cfd51da8559a56f5a7e5164c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 821039
subscribe.goodlifestylenews.com/favicon.ico
104.21.30.61404 Not Found 238 B URL GET HTTP/1.1 subscribe.goodlifestylenews.com/favicon.ico
IP 104.21.30.61:80
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
File type HTML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Cookie: PHPSESSID=ae12eb0a41a392eb93289b40bb6e1591; _ga_WJJ5P9F2X8=GS1.1.1714006326.1.0.1714006326.0.0.0; _ga=GA1.1.393124671.1714006326
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 25 Apr 2024 00:52:06 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 8
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p7LMlKNJbqxdj0nJbstTf%2BcCti0zeECFxcnOc9ODS16mkeTtZClPSOM133E3KKjHq3jKMenAVfef356v8tJ83dyerJKNm9SZ7AFSQrgewx%2F692Tc%2FA8M3GvMWOMflSjuOTY1LVYBHlb35HTeY8Clsn0X"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879a59368e88b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
go.goodlifestylenews.com/dummyarticleclickers_43754/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2578/1610/4a9834ecac99f8a72a7e3bb0819f9019/mpmta/news/43754/17
104.21.30.61302 Found 0 B URL User Request GET HTTP/2 go.goodlifestylenews.com/dummyarticleclickers_43754/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2578/1610/4a9834ecac99f8a72a7e3bb0819f9019/mpmta/news/43754/17
IP 104.21.30.61:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dummyarticleclickers_43754/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2578/1610/4a9834ecac99f8a72a7e3bb0819f9019/mpmta/news/43754/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 00:52:01 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47186&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&redirect_id=43754&bid=17
cache-control: max-age=600
expires: Thu, 25 Apr 2024 01:02:00 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZxmvArhb2ob3Z%2BRbM57kbZVbzlGNmZueRlTqMVf8LuNStBEp6NI3PJ3X%2FU2mcCnONc49fqpri4PvJwclU9Mm5W7KbYjzQJVtEgX5OT074EtogKhNBbIEs%2FpGxtJ92o3hixzKZL7L3apK%2FJA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879a590e8833b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17
104.21.30.61302 Found 0 B URL User Request GET HTTP/3 subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17
IP 104.21.30.61:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Thu, 25 Apr 2024 00:52:03 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=ae12eb0a41a392eb93289b40bb6e1591; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aj93tmgEkAPFldp8vgu19SEoOHAa9%2BKhRGFrs7oZE4SHsKBIGCJL3kLq%2Fy3kDtnAh3hMa6K76WzIUXH2NaOE%2B3fgnLyBAYZTP5xR5Hwn%2FT%2Bbsx0tqYzunaeBiCezbftU7WTcFndqmkF99w3Z1ksqznX%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879a5919297956b9-OSL
alt-svc: h3=":443"; ma=86400
verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47186&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&redirect_id=43754&bid=17
104.18.20.187302 Found 0 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47186&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&redirect_id=43754&bid=17
IP 104.18.20.187:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=ec55f96bdbee115719939c545d55f6bb&product=47186&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&redirect_id=43754&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 00:52:02 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=9484ff2e3e4ab92c2390e465275be525; path=/
pixel_session_hash_47186=3415447649292290246; expires=Sat, 25-May-2024 00:52:00 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_47186=09b1afff228f1ca09d12a7dc210573336595a8466fb949c2c1ec0a86dccd464f; expires=Sat, 27-Apr-2024 00:52:00 GMT; Max-Age=172800
__cf_bm=xpFLTvCZJiARZcmMJRYDp4OfxmyhFN4k6qtZ8f7T8Z8-1714006322-1.0.1.1-ffRQvMA5wv_3nVkVDl556rZ3ZK1eegqNMYgUrY5J1h49_XHnGW1SBEU1fXAv.Y4e_OEpsSLqKybjBrX0chc5Xw; path=/; expires=Thu, 25-Apr-24 01:22:02 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 879a59132db1b50f-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by http://subscribe.goodlifestylenews.com/?email=tammy.j.lanctot@abc12.com&redirect_id=43754&bid=17&ses_id=ae6b22687fe6204ffbf8a3b4c52316cc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 116668
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2