| 470kwc1.com/clk.trk?CID=457224&AFID=430135&SID=3415447649292151113 |  3.17.114.146 | 301 Moved Permanently | 134 B |
URL User Request GET HTTP/1.1470kwc1.com/clk.trk?CID=457224&AFID=430135&SID=3415447649292151113 IP3.17.114.146:80
File typeHTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /clk.trk?CID=457224&AFID=430135&SID=3415447649292151113 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Wed, 17 Apr 2024 04:25:35 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://470kwc1.com:443/clk.trk?CID=457224&AFID=430135&SID=3415447649292151113
|
|
| ocsp.r2m03.amazontrust.com/ | 18.238.246.206 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP18.238.246.206:0
Hash49a80cda47fad1ec834e0e8ad8b0b94d 14622f7c2b6a2293657f9da4dd3dca4e0e873b4e c5c6f5ad6994ba2751ad5f7a3d893370c57e39fe0029916e0c8af8c08a911f98
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 04:25:35 GMT
Server: ECAcc (amb/6B35)
X-Cache: Miss from cloudfront
Via: 1.1 1d10719558a2481e0d462e12964f647a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: XOlhwjMQD22feBe-JTzfyATAOgxs_SOqOxsIH5X0n1dmaZ5Y9oNG3A==
|
|
| 470kwc1.com/clk.trk?CID=457224&AFID=430135&SID=3415447649292151113 | 3.17.114.146 | 301 Moved Permanently | 216 B |
URL User Request GET HTTP/1.1470kwc1.com/clk.trk?CID=457224&AFID=430135&SID=3415447649292151113 IP3.17.114.146:80
File typeHTML document, ASCII text, with CRLF line terminators Hash91a5f50d8db4f769f63ab0e9f9c07e40 24cdff6859dcf58c6952d19660b20a0ffbc9248d dfbf16ff59767219ef67bac288644de86b79a4f976d5c2c8d3c6548e02346e52
GET /clk.trk?CID=457224&AFID=430135&SID=3415447649292151113 HTTP/1.1
Host: 470kwc1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Apr 2024 04:25:36 GMT
content-type: text/html; charset=utf-8
content-length: 216
location: https://pro.paradigm-press.info/m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a
cache-control: private
server: Microsoft-IIS/10.0
p3p: policyref="/p3p/P3P.470kwc1.com.xml", CP="NOI DSP COR NID ADM DEV OUR STP OTC"
x-aspnet-version: 4.0.30319
set-cookie: LTTC6_457224=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a; expires=Wed, 24-Apr-2024 04:25:36 GMT; path=/; secure; SameSite=None
x-powered-by: ASP.NET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| go.goodlifestylenews.com/ | 172.67.172.49 | | 143 B |
URL go.goodlifestylenews.com/ IP172.67.172.49:0
File typeHTML document, ASCII text Hashf1fb042c62910c34be16ad91cbbd71fa 5bc7aceba9a8704ef4b1d427d7d08b140afcd866 9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 04:25:36 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHP6bHxjwtYBH8%2Ffg1qjJEtbVsiWQkR7nhNqE9YrBFF7FBmh0b%2BvGkd5DzKbdDtBhV5kJ89RgbY7pIFqDvjxlqO2BU1ly9g470VjQuR1BSM5oAj7EmlqawAKDJ5CES8J6psbnerYrTb6XLI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8759a6f20c8dabd5-CPH
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| pro.paradigm-press.info/m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a | 192.135.136.169 | 301 Moved Permanently | 216 B |
URL User Request GET HTTP/1.1pro.paradigm-press.info/m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a IP192.135.136.169:443
CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com FingerprintD0:23:A8:B2:78:50:C6:21:FE:9D:C7:7F:E1:47:6F:02:D9:A8:1C:44 ValidityTue, 30 Jan 2024 12:33:08 GMT - Mon, 29 Apr 2024 12:33:07 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash91a5f50d8db4f769f63ab0e9f9c07e40 24cdff6859dcf58c6952d19660b20a0ffbc9248d dfbf16ff59767219ef67bac288644de86b79a4f976d5c2c8d3c6548e02346e52
GET /m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a HTTP/1.1
Host: pro.paradigm-press.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigm-press.info/m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a
Date: Wed, 17 Apr 2024 04:25:36 GMT
Content-Length: 216
Set-Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!4Y8GnBN5NObOyFg0QCUGrw3uOK3bWdkkNpJJtyQ6b8lOjUiniboUFPCXmIutVywSvZG2TB7m8qwkvuQ=; path=/; Httponly
|
|
| pro.paradigm-press.info/m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a | 192.135.136.169 | 301 Moved Permanently | 251 B |
URL User Request GET HTTP/1.1pro.paradigm-press.info/m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a IP192.135.136.169:443
CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com FingerprintD0:23:A8:B2:78:50:C6:21:FE:9D:C7:7F:E1:47:6F:02:D9:A8:1C:44 ValidityTue, 30 Jan 2024 12:33:08 GMT - Mon, 29 Apr 2024 12:33:07 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashbbb0234190fa5985bc4832ba45e5c3c3 e4da97dedd92680800c61e727052b12661cb6596 899b208fe6e77fd0106464b0a324d8aeb3f076eca44fe06e25a4020ae3b774c4
GET /m/2216507?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a HTTP/1.1
Host: pro.paradigm-press.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: BIGipServerIRIS_PROD_HTTP_POOL=!4Y8GnBN5NObOyFg0QCUGrw3uOK3bWdkkNpJJtyQ6b8lOjUiniboUFPCXmIutVywSvZG2TB7m8qwkvuQ=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true
Date: Wed, 17 Apr 2024 04:25:36 GMT
Content-Length: 251
Set-Cookie: 2216507=2621233; expires=Tue, 07-May-2024 04:25:37 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!vYa3xcU8F/gbSTw0QCUGrw3uOK3bWUNoJOFIeJhngc4McqK4FvUc3+OvqPvtN6ExnksQXW8WVGgDy9U=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true | 161.129.26.18 | 200 OK | 11 kB |
URL User Request GET HTTP/1.1pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true IP161.129.26.18:443
CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com FingerprintD0:23:A8:B2:78:50:C6:21:FE:9D:C7:7F:E1:47:6F:02:D9:A8:1C:44 ValidityTue, 30 Jan 2024 12:33:08 GMT - Mon, 29 Apr 2024 12:33:07 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1672), with CRLF, LF line terminators Hash2b2687e51c599bb92c1a8a4d232db9de 663a9d588359ebe658e3996f57c192c6d3733276 476c9ec61a880c70f13d862ffbf4626e97fcf84a6442d2224600fe81cf5e520c
GET /p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 17 Apr 2024 04:25:38 GMT
Content-Length: 11213
Set-Cookie: LAWNZ724=; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!b4zZe6inJHJV7lQ0QCUGrw3uOK3bWQsegJPB5N96OXD6zYEhjBhqYkrgrK6M9pSMq96BJLBP0ebCorw=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| use.typekit.net/aln6yrh.css |  80.239.138.160 | 200 OK | 708 B |
URL GET HTTP/2use.typekit.net/aln6yrh.css IP80.239.138.160:443 ASN#1299 Arelion Sweden AB
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (516) Hash3bc312b56db1ff2039c1d562fb4d48fc 5f736ea91e878e8cf1b148a11acab889aaedaa2f 1f24d16c1e680a7a16d2624dde92ca899841fed852281ffcdb8e51015af8d14e
GET /aln6yrh.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 708
date: Wed, 17 Apr 2024 04:25:38 GMT
X-Firefox-Spdy: h2
|
|
| pro.paradigmnewsletters.org/p/Scripts/Common.js | 161.129.26.18 | 200 OK | 1.1 kB |
URL GET HTTP/1.1pro.paradigmnewsletters.org/p/Scripts/Common.js IP161.129.26.18:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com FingerprintD0:23:A8:B2:78:50:C6:21:FE:9D:C7:7F:E1:47:6F:02:D9:A8:1C:44 ValidityTue, 30 Jan 2024 12:33:08 GMT - Mon, 29 Apr 2024 12:33:07 GMT
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash2fa1e7a35bfa376eff7f1426fc4a8afa 008b48dbd95a158542969743c18d0bc33e0a9384 857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true
DNT: 1
Connection: keep-alive
Cookie: LAWNZ724=; BIGipServerIRIS_PROD_HTTPS_POOL=!b4zZe6inJHJV7lQ0QCUGrw3uOK3bWQsegJPB5N96OXD6zYEhjBhqYkrgrK6M9pSMq96BJLBP0ebCorw=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "a37f814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 17 Apr 2024 04:25:38 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| fast.wistia.com/assets/external/E-v1.js | 151.101.66.132 | 200 OK | 137 kB |
URL GET HTTP/2fast.wistia.com/assets/external/E-v1.js IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65474) Size137 kB (136623 bytes) Hash26cb32ffe01f5beb4843d64521dd483e a9c4dbebc3e1f19dad5f86a9c280184cbcaa2c0e d9346ad79316e5e6cd963ec2c3a90cb31ab73eb44e817131871c10959175a0f0
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 16 Apr 2024 15:26:39 GMT
etag: "9c4577923cced55a7d39723bb79bf33a"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:38 GMT
age: 3442
x-served-by: cache-iad-kjyo7100044-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 26, 677
x-timer: S1713327938.376467,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: fa99d54708370281794f72e3586ef5977a90a618
content-length: 136623
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js | 142.251.9.95 | 200 OK | 34 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js IP142.251.9.95:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32077) Hash4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 12:39:22 GMT
expires: Thu, 10 Apr 2025 12:39:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 575176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pro.paradigmnewsletters.org/p/Scripts/HideContent.js | 161.129.26.18 | 200 OK | 466 B |
URL GET HTTP/1.1pro.paradigmnewsletters.org/p/Scripts/HideContent.js IP161.129.26.18:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerLet's Encrypt Subjectordertracking6.pubsvs.com FingerprintD0:23:A8:B2:78:50:C6:21:FE:9D:C7:7F:E1:47:6F:02:D9:A8:1C:44 ValidityTue, 30 Jan 2024 12:33:08 GMT - Mon, 29 Apr 2024 12:33:07 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashcc54a637e514fddfe0be2e7c2d062e5b a0f97813508d22d71f015b93cc8dfdcee65acdfd 580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.paradigmnewsletters.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true
DNT: 1
Connection: keep-alive
Cookie: LAWNZ724=; BIGipServerIRIS_PROD_HTTPS_POOL=!b4zZe6inJHJV7lQ0QCUGrw3uOK3bWQsegJPB5N96OXD6zYEhjBhqYkrgrK6M9pSMq96BJLBP0ebCorw=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 17 Apr 2024 04:25:38 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| p.typekit.net/p.css?s=1&k=aln6yrh&ht=tk&f=37505.31229.31231&a=135189822&app=typekit&e=css |  23.36.76.184 | 200 OK | 5 B |
URL GET HTTP/2p.typekit.net/p.css?s=1&k=aln6yrh&ht=tk&f=37505.31229.31231&a=135189822&app=typekit&e=css IP23.36.76.184:443 ASN#20940 Akamai International B.V.
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
Hash83d24d4b43cc7eef2b61e66c95f3d158 f0cafc285ee23bb6c28c5166f305493c4331c84d 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=aln6yrh&ht=tk&f=37505.31229.31231&a=135189822&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:38 GMT
X-Firefox-Spdy: h2
|
|
| cdn.getblueshift.com/blueshift.js | 18.239.36.125 | 200 OK | 2.8 kB |
URL GET HTTP/1.1cdn.getblueshift.com/blueshift.js IP18.239.36.125:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.getblueshift.com Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47 ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6625), with no line terminators Hashe70a08bd9e7ef156c1673f55ed87aa85 9dfa4cf582654332eb4e1ada9843594ca64bb0d2 a97c4e09767a155128f03c8a72efccc7d8e38e2e8e78daf14c8e5beaf72ff1a5
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2826
Connection: keep-alive
Last-Modified: Wed, 24 Jan 2024 03:44:50 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 17 Apr 2024 04:18:13 GMT
Cache-Control: max-age=3600
ETag: "bd39fba69cd2745738daf44e0e350f6e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0b7cb67940347be0c4ee6f93e9091938.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: D6Uw04QgBy7zFLb6K7ccJIXTSmZU2G2U8cxwAtm4Nccxx7x11P0TLg==
Age: 1882
|
|
| use.typekit.net/af/b46243/00000000000000007735a0f7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3 | 80.239.138.160 | 200 OK | 19 kB |
URL GET HTTP/2use.typekit.net/af/b46243/00000000000000007735a0f7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3 IP80.239.138.160:443 ASN#1299 Arelion Sweden AB
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), CFF, length 19128, version 1.0 Hash40111ddeb9f04e47990093ebdec25905 b45df17feb487d7f4888a971597bdc2752bde3c3 6af66273d62b3a86ee4d5ef79cb679f77020eb65a51c937021317fa4d1605815
GET /af/b46243/00000000000000007735a0f7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 19128
etag: "36bae3c18d0a7cebfe5b763ab5a26f3bc319e237"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Wed, 17 Apr 2024 04:25:38 GMT
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.147.94 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.147.94:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 12 Apr 2024 04:12:47 GMT
expires: Sat, 12 Apr 2025 04:12:47 GMT
cache-control: public, max-age=31536000
age: 432771
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.147.94 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.147.94:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 12 Apr 2024 04:12:47 GMT
expires: Sat, 12 Apr 2025 04:12:47 GMT
cache-control: public, max-age=31536000
age: 432771
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-P95MDDF | 142.250.147.97 | 200 OK | 119 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-P95MDDF IP142.250.147.97:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (58328) Size119 kB (118630 bytes) Hashd987fd7adfaa52373bca7fe926da1703 95e1ee5d82fd874f39f1dbb49b13160fc199ffc7 0e0825d3c266faabc6ebe3328bf3df9f2ec20ddda4561afafd09a27c4d64856c
GET /gtm.js?id=GTM-P95MDDF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 04:25:38 GMT
expires: Wed, 17 Apr 2024 04:25:38 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 118630
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NKRVP76 | 142.250.147.97 | 200 OK | 117 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-NKRVP76 IP142.250.147.97:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (56012) Size117 kB (116622 bytes) Hasha1a570eb6be6aecda566fd660e0cc3c8 02fe68e284e5b38d9dce48cef3aab1baf0bc12a5 baa1d156385fac004738aaf7379f47ab919423ec36ffd2457fc536ca37f985f4
GET /gtm.js?id=GTM-NKRVP76 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 04:25:38 GMT
expires: Wed, 17 Apr 2024 04:25:38 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 116622
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg | 54.230.241.180 | 200 OK | 62 kB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg IP54.230.241.180:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Hash1dc38080d6c9b9fd76a40a2c8c3f39fc 074548f7b26d805b2ce1a4806e8797285fee469d 4d48aae29e189eb89524b397fce6b1ae961719ea407b5409f612955baca8e69d
GET /AWN/awn_doomsday_0623/awn_doomsday_bg_01.jpg HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 61582
server: nginx
date: Thu, 06 Jul 2023 22:34:12 GMT
last-modified: Mon, 26 Jun 2023 15:02:24 GMT
cache-control: max-age=31536000
expires: Fri, 05 Jul 2024 22:34:12 GMT
etag: "6499a880-f08e"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cHDi7JsBnF2Asm9dYWVEbVsc9BHE8RDVgmMcfztQqONkDWB0zeBdvQ==
age: 24645087
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-play-icon.png | 54.230.241.180 | 200 OK | 318 B |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-play-icon.png IP54.230.241.180:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePNG image data, 31 x 39, 8-bit/color RGBA, non-interlaced Hash120ca7c31817e6e137e2a807ddcddbe0 254f6b23b9b2d4c040decf505eac8b6a9296a1c6 dd5f84c4b871b07d787fe2709d47cdc18eee536bb2560c6f889256dd59c61b48
GET /AWN/exit-pop/exitpop-play-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 318
server: nginx
date: Mon, 18 Sep 2023 18:05:07 GMT
x-frame-options: sameorigin
x-accel-version: 0.01
last-modified: Fri, 15 Sep 2023 16:23:24 GMT
etag: "13e-6056836372650"
accept-ranges: bytes
cache-control: max-age=31536000
expires: Tue, 17 Sep 2024 18:05:07 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: SAMEORIGIN
x-powered-by: PleskLin
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Uf34M9UgyiDyT6QW-OapJkDQRIf9N-Kw59J42RH_GXGESFNO2Ups-A==
age: 18267632
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-warning-icon.png | 54.230.241.180 | 200 OK | 1.7 kB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-warning-icon.png IP54.230.241.180:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePNG image data, 73 x 75, 8-bit/color RGBA, non-interlaced Hash40a8475cba41b161c3b142acc36b79e5 0da3639ed848b44a4efd71189e742a94b29280d4 186053f58f065437b88bc7ab02d4d48d7f203c61d615f81aa457b5f755d5a061
GET /AWN/exit-pop/exitpop-warning-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1716
server: nginx
date: Wed, 04 Oct 2023 13:28:12 GMT
last-modified: Fri, 15 Sep 2023 16:23:26 GMT
cache-control: max-age=31536000
expires: Thu, 03 Oct 2024 13:28:12 GMT
etag: "650484fe-6b4"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ht7d-d118GkUwyVHizZUnHEJFEPPV2MUdvgpNkDCD7NlmqSzSHAtHw==
age: 16901847
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-transcript-icon.png | 54.230.241.180 | 200 OK | 1.5 kB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/exit-pop/exitpop-transcript-icon.png IP54.230.241.180:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typePNG image data, 50 x 53, 8-bit/color RGBA, non-interlaced Hashc94eaaf8ec2941b35a23421f193b8c2e 156681cbd7cf2836598e47d3eec86f7a9772bde8 5fea6317f0aeb6da5271e9a104032ab162521148ec32b93df3c77129fa39fe97
GET /AWN/exit-pop/exitpop-transcript-icon.png HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1484
server: nginx
date: Mon, 18 Sep 2023 18:05:07 GMT
last-modified: Fri, 15 Sep 2023 16:23:23 GMT
cache-control: max-age=31536000
expires: Tue, 17 Sep 2024 18:05:07 GMT
etag: "650484fb-5cc"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SRBBX5C4rrTlOJLON88c-rQifpL4FPZOCOt1tUkQNVs9ny4hpGoRdw==
age: 18267632
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/vi9gl0qpn9.json | 151.101.66.132 | 200 OK | 1.7 kB |
URL GET HTTP/2fast.wistia.com/embed/medias/vi9gl0qpn9.json IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash7c8efe8bf4f946359f8259a671af24f5 1ba21dd31cde7c1343cc2f1fcb5a649b65b0f3a3 259902b84e09f39404ae6fd4fceb692c632ea85808b4e28fa11fe1edb8688ff6
GET /embed/medias/vi9gl0qpn9.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"259902b84e09f39404ae6fd4fceb692c"
x-request-id: dbfd6730-7a63-4d7e-ad52-f9c3fc788c6c
x-runtime: 0.058740
content-encoding: br
x-envoy-upstream-service-time: 61
via: 1.1 6946167499a4b8f515865d62f0b0b284.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD61-P1
x-amz-cf-id: IEYG66REeJih6AnuEn00bDmdwex8I5usJoQcfX0ZUn0Kg4fUaAaVNw==
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:39 GMT
age: 59814
x-served-by: cache-iad-kcgs7200126-IAD, cache-hel1410028-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 385, 1
x-timer: S1713327939.081351,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1654
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c | 142.250.147.97 | 200 OK | 99 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c IP142.250.147.97:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hash61db1529b147094c34747f1602bcdd0e 9b85d1ca81f91328f0db2187d4073ab00f1a7ef8 0f001112c4086b83f7dcd2ff55ad9bb32a81c1416f2fcd1b114f307e6587e938
GET /gtag/js?id=G-BYN6DTYEFQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 04:25:39 GMT
expires: Wed, 17 Apr 2024 04:25:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99376
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| s.yimg.com/wi/ytc.js |  87.248.119.252 | 200 OK | 6.3 kB |
IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZNdOaBghiyZcwWrWiwgs+ecuqMlDJBAVqYx2VUobhe3ITqMupIpI4yZqzG55QQB7M837Es8K810=
x-amz-request-id: 01RX8DB91CZYBFQE
date: Wed, 17 Apr 2024 03:42:44 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2576
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 87.248.119.252 | 200 OK | 6.3 kB |
IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZNdOaBghiyZcwWrWiwgs+ecuqMlDJBAVqYx2VUobhe3ITqMupIpI4yZqzG55QQB7M837Es8K810=
x-amz-request-id: 01RX8DB91CZYBFQE
date: Wed, 17 Apr 2024 03:42:44 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2576
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 87.248.119.252 | 200 OK | 6.3 kB |
IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZNdOaBghiyZcwWrWiwgs+ecuqMlDJBAVqYx2VUobhe3ITqMupIpI4yZqzG55QQB7M837Es8K810=
x-amz-request-id: 01RX8DB91CZYBFQE
date: Wed, 17 Apr 2024 03:42:44 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2576
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 87.248.119.252 | 200 OK | 6.3 kB |
IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZNdOaBghiyZcwWrWiwgs+ecuqMlDJBAVqYx2VUobhe3ITqMupIpI4yZqzG55QQB7M837Es8K810=
x-amz-request-id: 01RX8DB91CZYBFQE
date: Wed, 17 Apr 2024 03:42:44 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2576
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| paradigmpressgroup.com/favicons/apple-touch-icon.png | 44.210.42.183 | 200 OK | 3.0 kB |
URL GET HTTP/2paradigmpressgroup.com/favicons/apple-touch-icon.png IP44.210.42.183:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerLet's Encrypt Subjectparadigmpressgroup.com Fingerprint9F:5E:5C:45:8B:D7:39:29:DA:7C:07:64:1E:F0:C5:D7:22:AE:AB:4D ValidityWed, 10 Apr 2024 16:51:00 GMT - Tue, 09 Jul 2024 16:50:59 GMT
File typePNG image data, 180 x 180, 8-bit grayscale, non-interlaced Hashdd470648114adaceb47d36a18ad41d9d c93c69021ab4e381b4715938bed3732b132852b3 49dd5241fadc6a69795935a795804ed7206efb39f6dc6b5a0588f92d80775ad4
GET /favicons/apple-touch-icon.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 04:25:39 GMT
content-type: image/png
content-length: 3017
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"bc9-1823c06a3cb"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| paradigmpressgroup.com/favicons/favicon-16x16.png | 44.210.42.183 | 200 OK | 587 B |
URL GET HTTP/2paradigmpressgroup.com/favicons/favicon-16x16.png IP44.210.42.183:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerLet's Encrypt Subjectparadigmpressgroup.com Fingerprint9F:5E:5C:45:8B:D7:39:29:DA:7C:07:64:1E:F0:C5:D7:22:AE:AB:4D ValidityWed, 10 Apr 2024 16:51:00 GMT - Tue, 09 Jul 2024 16:50:59 GMT
File typePNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced Hash2bb2efaa073e4987ba1867aff02ab3ac ea05acee8f408e3f86830b5f2da0616ced013006 6b712b83f2054506208f4243b57e7bd48fa0dcf3a10c0ff609bfc5ea8398ddc6
GET /favicons/favicon-16x16.png HTTP/1.1
Host: paradigmpressgroup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 04:25:39 GMT
content-type: image/png
content-length: 587
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 26 Jul 2022 19:40:44 GMT
etag: W/"24b-1823c06a3cc"
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/googleAnalytics4.js | 151.101.66.132 | 200 OK | 4.5 kB |
URL GET HTTP/2fast.wistia.com/assets/external/googleAnalytics4.js IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (17563) Hash6bef00e6a3097beb9029c1485db02022 43a9e765e6e6317e46b182b484170508c60073cf 0dc147d17a8a25eb266f07789362f142286be5205d2e34fee1cf0136cfaad3d4
GET /assets/external/googleAnalytics4.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 16 Apr 2024 15:26:39 GMT
etag: "d22bcf196ba8e07c2f90d09a270e1ee8"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:39 GMT
age: 2898
x-served-by: cache-iad-kiad7000150-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 47, 4
x-timer: S1713327940.731313,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: fa99d54708370281794f72e3586ef5977a90a618
content-length: 4452
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10082412.json | 87.248.119.252 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10082412.json IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10082412.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: GMJR60C0XJYYSH1M
x-amz-id-2: VQfKpyxYYl7msRtzg3d6bH4ipF3xG5VtTIdUFN/6LjzVuYlNXZ6Z4TX3kcoG5zQCAXcrbVFCuvs=
content-type: application/json
date: Wed, 17 Apr 2024 03:45:17 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 2422
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10091245.json | 87.248.119.252 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10091245.json IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10091245.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 6E00D6DCBNJ7WNF5
x-amz-id-2: 6Hi+EEbtjAyvIrtwRzTvV1wzJdCnDuL+nitK/ge6GjeuMH6ZlwfOOVpFyuB06D7bkcSfuT9UwLI=
content-type: application/json
date: Wed, 17 Apr 2024 04:21:27 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 252
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10114794.json | 87.248.119.252 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10114794.json IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10114794.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: GMJTXJT28HJCBMKJ
x-amz-id-2: 1R4E7UxxFXJVeXpI+itHcssy2vbPcVBsS2CiJO2Br4vKRrKSzlW0lG3fB7n1gFc1z5mWkV8wguA=
content-type: application/json
date: Wed, 17 Apr 2024 03:45:17 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 2422
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10125189.json | 87.248.119.252 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10125189.json IP87.248.119.252:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10125189.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 13H064CM8R5JTYPK
x-amz-id-2: uP+RMF516gW0bUIbA2p4t61hKuS5t40GaO66xOWzdZsaIyCVWmmhqRYOmiUC5gBEKkpUjja4gXEnjqSeRbhv+0IfDaxPmHQM
content-type: application/json
date: Wed, 17 Apr 2024 04:16:37 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 542
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1037687728.1713327939>m=45je44f0v9122066590z8811578897za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1386945616 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1037687728.1713327939>m=45je44f0v9122066590z8811578897za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1386945616 IP142.250.74.163:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint0E:DD:25:54:7B:C3:7F:EC:27:35:B1:EC:15:C4:B7:D2:09:71:3B:68 ValidityMon, 04 Mar 2024 07:26:33 GMT - Mon, 27 May 2024 07:26:32 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BYN6DTYEFQ&cid=1037687728.1713327939>m=45je44f0v9122066590z8811578897za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1386945616 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 17 Apr 2024 04:25:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Nuke_0723-min.gif | 54.230.241.180 | 200 OK | 6.9 MB |
URL GET HTTP/2d2z65klgtz99km.cloudfront.net/AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Nuke_0723-min.gif IP54.230.241.180:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1200 x 675 Size6.9 MB (6867820 bytes) Hash9f7dfafea21b55abb570daabc3a519d7 a7536aeb1c7a5282f73966d86b18903c9fe18662 a6a18ac70cff1446e94924615427867515398fe17d6d0730083117b2be8248c5
GET /AWN/awn_doomsday_0623/AWN_Doomsday_CTP_Nuke_0723-min.gif HTTP/1.1
Host: d2z65klgtz99km.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 6867820
server: nginx
date: Wed, 13 Dec 2023 18:01:50 GMT
last-modified: Fri, 07 Jul 2023 15:23:32 GMT
cache-control: max-age=31536000
expires: Thu, 12 Dec 2024 18:01:50 GMT
etag: "64a82df4-68cb6c"
x-powered-by: PleskLin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GCvroSSBod_6f08GV7PwxdkxbOghokKoq-XYLZo84ViJ3gYKsDua1A==
age: 10837429
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C | 142.250.147.97 | 200 OK | 91 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C IP142.250.147.97:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Hashbf20b423d6586c63ca03c79946cc5c07 1b92790c4b887d6b4138ed37a60100efc306cc57 0c14f61bdffb83022640958d7ea050876279dd91b2333aeb0b7bfae223b0d223
GET /gtag/js?id=G-9JTVKL1Z3C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 04:25:40 GMT
expires: Wed, 17 Apr 2024 04:25:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91144
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c | 142.250.147.97 | 200 OK | 91 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c IP142.250.147.97:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Hash72a1548ee27266bf3b0c629b5a0e87e0 15485d7a7251e0aa8a0ed8b3dd62a44fff1fd8a1 7f83aa4b300ec2fd8e40da2876b61937c636217a6382bc66ce94d44a0681eb3e
GET /gtag/js?id=G-9JTVKL1Z3C&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 04:25:40 GMT
expires: Wed, 17 Apr 2024 04:25:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91147
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2700 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2700 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2700 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=3&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Click%20Report&tfd=2730 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=3&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Click%20Report&tfd=2730 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=3&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Click%20Report&tfd=2730 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=2&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Click%20Report&tfd=2723 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=2&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Click%20Report&tfd=2723 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=2&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Click%20Report&tfd=2723 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=4&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=awn_aware&_c=1&tfd=2731 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=4&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=awn_aware&_c=1&tfd=2731 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=4&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=awn_aware&_c=1&tfd=2731 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/playPauseLoadingControl.js | 151.101.66.132 | 200 OK | 22 kB |
URL GET HTTP/2fast.wistia.com/assets/external/playPauseLoadingControl.js IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65455) Hash7845f53703880c301c91e55dacfb2730 a91923e2fe5f5a139f65a41682cee83637c636bf 441f641db8dc0a94620a07d59cfdad03e6fd3630fe3af81f82ce80d9d8ac3942
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Tue, 16 Apr 2024 15:26:39 GMT
etag: "054f6647c2b3166c5479ecec2e1cdb23"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:41 GMT
age: 3446
x-served-by: cache-iad-kiad7000029-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 37, 113
x-timer: S1713327941.325278,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: fa99d54708370281794f72e3586ef5977a90a618
content-length: 21596
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/engines/hls_video.js | 151.101.66.132 | 200 OK | 118 kB |
URL GET HTTP/2fast.wistia.com/assets/external/engines/hls_video.js IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size118 kB (118197 bytes) Hash0d0944584a2e0b7299c788dfbcc6224b dbafb5834a1553d168e2e61633d9dfb37d29a438 c6c26035fb90773bae20e3accc00fe4bf7368ac9eb802ce0ee066ffb3f89b738
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Tue, 16 Apr 2024 15:26:39 GMT
etag: "eb7dd49fb6d9bc27920e7403bf0de676"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:41 GMT
age: 3446
x-served-by: cache-iad-kcgs7200057-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 34, 79
x-timer: S1713327941.350761,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: fa99d54708370281794f72e3586ef5977a90a618
content-length: 118197
X-Firefox-Spdy: h2
|
|
| distillery.wistia.com/x | 54.230.111.33 | 204 No Content | 0 B |
IP54.230.111.33:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subjectstats-tap-production-cloudfront-app-cname.wistia.com Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40 ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1672
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 17 Apr 2024 04:25:41 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 1
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JAA9L5t-y9Q0YuYZMAv5q73cokvFSH-Jlv4lkE0i0G7z8GOqeeZpJQ==
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 13.33.141.117 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP13.33.141.117:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1079
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 17 Apr 2024 04:25:41 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
server: envoy
x-cache: Miss from cloudfront
via: 1.1 606da44defe61a7e9582761e904966f8.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: xq2gU7wzRteJUfYXBm6R4C10HznXy22iPb_oUyyoj3PCgxnwadCdSg==
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 13.33.141.117 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP13.33.141.117:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 17 Apr 2024 04:25:41 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 606da44defe61a7e9582761e904966f8.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: Flj59Ujr81Xf_LjjEXdObOV_6La22q6nFcqD0VSrJmNM4dEzyb485w==
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/vi9gl0qpn9.m3u8 | 151.101.66.132 | 200 OK | 756 B |
URL GET HTTP/2fast.wistia.com/embed/medias/vi9gl0qpn9.m3u8 IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash8b9720c8d5c7d8aa09e324478cda5bfd 6b4e9a3c19344ce51ca5b8c9b535b70fd036c53a 5c517ee7856e09718e63f7abfcc822406f9cc44c7df24d10147d9dc62a676eea
GET /embed/medias/vi9gl0qpn9.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"5c517ee7856e09718e63f7abfcc82240"
x-request-id: 4c442548-15f8-4379-96e0-e814b742bd74
x-runtime: 0.036032
x-envoy-upstream-service-time: 37
via: 1.1 ba82151bf51e4c722c5305c983d8b71e.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: erjbwdMJgQidPziv2mtiUlfwftpIJN3LM1kkVvJgd7681SM_rhUfQw==
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:41 GMT
age: 0
x-served-by: cache-iad-kiad7000145-IAD, cache-hel1410028-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 21751, 1
x-timer: S1713327942.568628,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 756
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/images/blank.gif | 151.101.66.132 | 200 OK | 1.2 kB |
URL GET HTTP/2fast.wistia.com/assets/images/blank.gif IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeGIF image data, version 89a, 100 x 100 Hashfbdc4ed9a1e2ee4917a265306927bcf1 6d177725d8230df0457e72004080f712e26fe624 a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:41 GMT
age: 1439
x-served-by: cache-iad-kcgs7200077-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 53
x-timer: S1713327942.582613,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1214
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/a916b886cdedfddc7d1a88876c7a5f81a6bed538.m3u8 | 13.33.141.86 | 200 OK | 113 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/a916b886cdedfddc7d1a88876c7a5f81a6bed538.m3u8 IP13.33.141.86:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Size113 kB (112688 bytes) Hash934afc0363920066ebf94206b8d052e2 ecd09df69e0760058b8234a32eee774498d3b07b 84d47a39d76b90b6fe4b5f36db24e4693c9ec8d9ea44a0cb7f7ffcc4d9554dd9
GET /deliveries/a916b886cdedfddc7d1a88876c7a5f81a6bed538.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 112688
server: envoy
date: Tue, 16 Apr 2024 07:25:19 GMT
expires: Wed, 16 Apr 2025 07:25:19 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: a916b886cdedfddc7d1a88876c7a5f81a6bed538-hls-segment
surrogate-key: a916b886cdedfddc7d1a88876c7a5f81a6bed538-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 178
x-cache: Hit from cloudfront
via: 1.1 8090b3305631d47aedbe1f9d2965b238.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: LA0VccM_Z-94r9l7ZZIuur-j3505pkZvVQOeZfHBo9Vh_K3J7X5geQ==
age: 75622
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/a916b886cdedfddc7d1a88876c7a5f81a6bed538.m3u8/seg-1-v1-a1.ts | 13.33.141.86 | 200 OK | 509 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/a916b886cdedfddc7d1a88876c7a5f81a6bed538.m3u8/seg-1-v1-a1.ts IP13.33.141.86:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File typeMPEG transport stream data Size509 kB (508728 bytes) Hash973e16756854045700dbef5bdaea0c80 489a71bb110adcdfb52633b80368c608f3760de0 7fc91311c429d04fd7eab6a762e7c144fdb9f6706362f8a2af97942937e8f238
GET /deliveries/a916b886cdedfddc7d1a88876c7a5f81a6bed538.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 508728
server: envoy
date: Sat, 13 Apr 2024 07:18:03 GMT
expires: Sun, 13 Apr 2025 07:18:03 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: a916b886cdedfddc7d1a88876c7a5f81a6bed538-hls-segment
surrogate-key: a916b886cdedfddc7d1a88876c7a5f81a6bed538-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 110
x-cache: Hit from cloudfront
via: 1.1 8090b3305631d47aedbe1f9d2965b238.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: xRzPFcRZB6lWNsgw0P6cY9Wo61noobdMyz8Ji661z-NvM08kA1eKLA==
age: 335258
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/247ebdd86b7a5091d69c954ab9b0ec22024e2b66.m3u8 | 13.33.141.86 | 200 OK | 113 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/247ebdd86b7a5091d69c954ab9b0ec22024e2b66.m3u8 IP13.33.141.86:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Size113 kB (112688 bytes) Hashdd9e6855689e31c790b6f64fe9d22478 28aa77f7dc99f40e2245a5766b8105cc3c5bb4e7 9253fba8d3536fc829647887dce166a81d3f8946989fed32dc2b491c6705696c
GET /deliveries/247ebdd86b7a5091d69c954ab9b0ec22024e2b66.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 112688
server: envoy
date: Sun, 14 Apr 2024 03:32:44 GMT
expires: Mon, 14 Apr 2025 03:32:44 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 247ebdd86b7a5091d69c954ab9b0ec22024e2b66-hls-segment
surrogate-key: 247ebdd86b7a5091d69c954ab9b0ec22024e2b66-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 216
x-cache: Hit from cloudfront
via: 1.1 8090b3305631d47aedbe1f9d2965b238.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: 2SWcrzFWukzS2N-znlpv8Uj3EGhGysg8MzO21WWpOdQvNqch04pG7Q==
age: 262377
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/allIntegrations.js | 151.101.66.132 | 200 OK | 5.8 kB |
URL GET HTTP/2fast.wistia.com/assets/external/allIntegrations.js IP151.101.66.132:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (23371) Hashd5dd13ae4e2cc9dbc4601c4d95143418 13405305698ad9cc7f44a86871fa1c0d057a9bf4 709f139528814cc9d5158ed469a578082a81607df49b40e41a6fb4b240567ecd
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Tue, 16 Apr 2024 15:26:39 GMT
etag: "4d5cbf7cb285a542334e7de7bc37ed93"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 17 Apr 2024 04:25:42 GMT
age: 3447
x-served-by: cache-iad-kiad7000169-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 49, 80
x-timer: S1713327942.343219,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: fa99d54708370281794f72e3586ef5977a90a618
content-length: 5773
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 13.33.141.117 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP13.33.141.117:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2225
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 17 Apr 2024 04:25:42 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 606da44defe61a7e9582761e904966f8.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: 9eY0adXpmqd_9YMGeaeKscaEcBDw-Tp0EaNF3xFnZFi8mh5rXtegjw==
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 18.238.246.206 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP18.238.246.206:0
Hash09e430bec5192f29dcc922b97f8cd4ae f25fbfc7fff3de87017443b9e45b35434f2f30d5 4a517b0c69d9f9391fc70543e9b96a70e22fc574d03ec0c129555be7617166d0
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 04:25:42 GMT
Last-Modified: Wed, 17 Apr 2024 04:17:17 GMT
Server: ECAcc (amb/6B12)
X-Cache: Miss from cloudfront
Via: 1.1 1d10719558a2481e0d462e12964f647a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: FiI7h56RfhR1Dk5CB-biflo9mKM2TMxS4zvkV4tC2wa8udeJJdH68A==
Age: 505
|
|
| api.getblueshift.com/unity.gif?t=1713327942&e=pageload&r=&z=522245&x=59976d352f424c4b27d325518576b9b2&k=567ebdbb-b196-a941-c23f-e3eb1836c5d3&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue | 44.237.0.154 | 200 OK | 42 B |
URL GET HTTP/2api.getblueshift.com/unity.gif?t=1713327942&e=pageload&r=&z=522245&x=59976d352f424c4b27d325518576b9b2&k=567ebdbb-b196-a941-c23f-e3eb1836c5d3&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue IP44.237.0.154:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerAmazon Subject*.getblueshift.com FingerprintD1:61:A7:FF:D0:FD:A2:46:9B:FE:0C:A8:F1:8A:A9:24:9B:70:04:65 ValidityWed, 07 Feb 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1713327942&e=pageload&r=&z=522245&x=59976d352f424c4b27d325518576b9b2&k=567ebdbb-b196-a941-c23f-e3eb1836c5d3&u=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 04:25:42 GMT
content-type: image/gif
content-length: 42
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: etag
access-control-allow-origin: https://pro.paradigmnewsletters.org
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&_s=5&tfd=9726 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&_s=5&tfd=9726 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&_s=5&tfd=9726 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 173
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=6&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Engagement&tfd=12564 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=6&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Engagement&tfd=12564 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z8811578897za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=6&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Engagement&tfd=12564 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=7&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Engagement&tfd=17565 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=7&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Engagement&tfd=17565 IP216.239.32.36:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BYN6DTYEFQ>m=45je44f0v9122066590z878323495za200&_p=1713327938539&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1037687728.1713327939&ul=en-us&sr=1280x1024&pscdl=noapi&_s=7&sid=1713327939&sct=1&seg=0&dl=https%3A%2F%2Fpro.paradigmnewsletters.org%2Fp%2Fawn_doomsday_0623%2FLAWNZ724%2F%3Fcake_s1%3D04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a%26h%3Dtrue&dt=The%20Doomsday%20Deal&en=Engagement&tfd=17565 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.paradigmnewsletters.org
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.paradigmnewsletters.org
date: Wed, 17 Apr 2024 04:25:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| verifiedwebpage.com/go?ehash=8b89a56bd01af566cb7dfc34953e71ef&product=30098&ar=55&cid=2555&lid=1610&slhash=a98f59376546a8cebae18dc9ca8edf5d&mtaid=mpmta&cid2=[s8]&cloudf_filter=1 |  104.18.20.187 | 302 Found | 0 B |
URL User Request GET HTTP/2verifiedwebpage.com/go?ehash=8b89a56bd01af566cb7dfc34953e71ef&product=30098&ar=55&cid=2555&lid=1610&slhash=a98f59376546a8cebae18dc9ca8edf5d&mtaid=mpmta&cid2=[s8]&cloudf_filter=1 IP104.18.20.187:443
CertificateIssuerGoogle Trust Services LLC Subjectverifiedwebpage.com FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56 ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=8b89a56bd01af566cb7dfc34953e71ef&product=30098&ar=55&cid=2555&lid=1610&slhash=a98f59376546a8cebae18dc9ca8edf5d&mtaid=mpmta&cid2=[s8]&cloudf_filter=1 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Apr 2024 04:25:35 GMT
content-type: text/html; charset=UTF-8
location: http://470kwc1.com/clk.trk?CID=457224&AFID=430135&SID=3415447649292151113
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=03b44d68cbfc02ceef22dee5adf2cf6e; path=/
pixel_session_hash_30098=3415447649292151113; expires=Fri, 17-May-2024 04:25:33 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_30098=ba43ca93d380be0d05107ed2e47d4b9201b34a3c5dae1bf379ca37897a78c373; expires=Fri, 19-Apr-2024 04:25:33 GMT; Max-Age=172800
__cf_bm=lx8.MbcjkFGTZ19UyGzTJ9rC3c6RSVUeoi10.bb__.0-1713327935-1.0.1.1-U07iUbwfjCYxtdzmyh.a9ZKxKEPZwi4kFnGsSau95HHEfZZjjsitjnvVhaOWhqC.aaGEVV2SrUc3WEIlt.qQcw; path=/; expires=Wed, 17-Apr-24 04:55:35 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8759a6e4bd7d92ac-CPH
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&family=Montserrat:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 27 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&family=Montserrat:wght@400;700&display=swap IP142.250.74.106:443
Requested byhttps://pro.paradigmnewsletters.org/p/awn_doomsday_0623/LAWNZ724/?cake_s1=04_143932583_d4fb4ed1-53ad-4f9f-b35e-7e31e0fc160a&h=true CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (1572) Hash115530008e2d61db32ec54fb9fa9738c dc17d576142ed38a0340f5293a80e912575cea6c 8f17d4472d648b8bdded27a9316a32a03ac0ff4da24c15abcd9ebc52f3828f49
GET /css2?family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&family=Montserrat:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.paradigmnewsletters.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 04:25:38 GMT
date: Wed, 17 Apr 2024 04:25:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| go.goodlifestylenews.com/doomsday0723/8b89a56bd01af566cb7dfc34953e71ef/55/leadsource/2555/1610/a98f59376546a8cebae18dc9ca8edf5d/mpmta | 104.21.30.61 | 302 Found | 0 B |
URL User Request GET HTTP/2go.goodlifestylenews.com/doomsday0723/8b89a56bd01af566cb7dfc34953e71ef/55/leadsource/2555/1610/a98f59376546a8cebae18dc9ca8edf5d/mpmta IP104.21.30.61:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /doomsday0723/8b89a56bd01af566cb7dfc34953e71ef/55/leadsource/2555/1610/a98f59376546a8cebae18dc9ca8edf5d/mpmta HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Apr 2024 04:25:34 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=8b89a56bd01af566cb7dfc34953e71ef&product=30098&ar=55&cid=2555&lid=1610&slhash=a98f59376546a8cebae18dc9ca8edf5d&mtaid=mpmta&cid2=[s8]&cloudf_filter=1
cache-control: max-age=600
expires: Wed, 17 Apr 2024 04:35:33 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qagybLtKfrsdkKIV9hTaDVNNgehS3T9tOo8os8TFV08oKUUwrSOnKFz9sHOf%2FaUbom%2B18X5metsfgl7gYdlBFEgtbIaJ%2BBieEpAwCwDPivc8LzYa%2F4H0%2BE0%2BU4Ltb6XdPjHr74HIue6beU8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8759a6dfa8fe9304-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0