links.goodlifestylenews.com/a/1610/click/1718/292482/7e260501a3786c98eb0c8955e3160698225f457e/e232a54fd092471defe400961a62934fd17a1b3c
35.238.129.105302 Found 235 B URL User Request GET HTTP/1.1 links.goodlifestylenews.com/a/1610/click/1718/292482/7e260501a3786c98eb0c8955e3160698225f457e/e232a54fd092471defe400961a62934fd17a1b3c
IP 35.238.129.105:443
Certificate IssuerLet's Encrypt
Subjectlinks.goodlifestylenews.com
Fingerprint6B:80:95:BD:77:FD:C0:26:F2:2A:D4:48:9D:61:FC:31:B0:E3:18:15
ValidityMon, 13 Nov 2023 07:41:12 GMT - Sun, 11 Feb 2024 07:41:11 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 79caef822f5acb0714b019ff244496d5
2040c5f350632839d9f431403762d729342bc507
0c25363bb145717855e33914636656d0c3eaa0f484a1553f985913a6c81667bd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a/1610/click/1718/292482/7e260501a3786c98eb0c8955e3160698225f457e/e232a54fd092471defe400961a62934fd17a1b3c HTTP/1.1
Host: links.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-type: text/html; charset=utf-8
transfer-encoding: chunked
status: 302 Found
cache-control: no-cache
vary: Origin
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 10fc5d8d-cdbd-4f24-9230-886de4623b0d
location: https://go.goodlifestylenews.com/dummyarticleclickers_14735/00901a7b4fd8ba24da0105e2628d5613/55/leadsource/1718/1610/a0937bfc5dee4bef30b86a9d0d073803/conid/news/14735/17
x-download-options: noopen
x-runtime: 0.054917
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 04:17:15 GMT
set-cookie: _session_id=c0d495795eea049a6f0c0c36950bccd6; path=/; expires=Mon, 04 Dec 2023 16:17:15 GMT; HttpOnly
x-powered-by: Phusion Passenger 5.3.7
server: nginx/1.22.1 + Phusion Passenger(R) 6.0.18
links.goodlifestylenews.com/
35.238.129.105 0 B URL links.goodlifestylenews.com/
IP 35.238.129.105:0
Certificate IssuerLet's Encrypt
Subjectlinks.goodlifestylenews.com
Fingerprint6B:80:95:BD:77:FD:C0:26:F2:2A:D4:48:9D:61:FC:31:B0:E3:18:15
ValidityMon, 13 Nov 2023 07:41:12 GMT - Sun, 11 Feb 2024 07:41:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: links.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 308 Permanent Redirect
content-length: 0
location: https://links.goodlifestylenews.com/
links.goodlifestylenews.com/
35.238.129.105 90 B URL links.goodlifestylenews.com/
IP 35.238.129.105:0
Certificate IssuerLet's Encrypt
Subjectlinks.goodlifestylenews.com
Fingerprint6B:80:95:BD:77:FD:C0:26:F2:2A:D4:48:9D:61:FC:31:B0:E3:18:15
ValidityMon, 13 Nov 2023 07:41:12 GMT - Sun, 11 Feb 2024 07:41:11 GMT
File type HTML document, ASCII text
Hash 01f4771c47a56dbdf77642c80eb9b799
6aead125925ec84c9171e3b29b9c2fc00682bda5
eec0a51a966b712aaccd11df320373becc55f174b97030419f9fae79f0cf542c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: links.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 Bad request
content-length: 90
cache-control: no-cache
content-type: text/html
connection: close
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
151.101.193.229200 OK 17 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP 151.101.193.229:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (60201)
Hash c5236e5d6a5d0ff97ff8c8e5102c6c03
6fbfdbddbe85c578de559adcc8d07cccbc16d514
87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 04:17:19 GMT
age: 8376766
x-served-by: cache-fra-etou8220032-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
151.101.193.229200 OK 30 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP 151.101.193.229:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 04:17:19 GMT
age: 22778252
x-served-by: cache-fra-eddf8230072-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
104.21.66.20200 OK 144 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
IP 104.21.66.20:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3\012- data
Size 144 kB (144253 bytes)
Hash e7eb0da863b2d3ead5846cdc3263a233
138225ea3d8ff08f07b046b858bf46bf2bba2e96
ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=2592000
expires: Sun, 31 Dec 2023 20:39:28 GMT
cf-cache-status: HIT
age: 200271
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IbMD1eSBlie%2FTQOcv395AgVHkdyqVpaLSunskYeQ%2BeIGPi%2FLevyscHIj9y57OCHGf%2BPNfaLT%2FsepscHd%2BRFpS9eArYlns1QFnPkKUMapaFLPjoOICKmJ%2FrNSZUi2lUvu1hvJ2%2FtJA%2FE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83013d331f1d5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
104.21.66.20200 OK 400 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
IP 104.21.66.20:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3\012- data
Size 400 kB (400505 bytes)
Hash b9a9621a927a5b9a9c71fdbb53bf8991
9c4cc398edb33da6a79e62701867cbf7fed4056d
d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=2592000
expires: Tue, 26 Dec 2023 04:19:52 GMT
cf-cache-status: HIT
age: 691046
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iRyXoq%2FKzql%2F8%2BFxNzpiKiKIWSzdJWAPFdtAOiMFm79UTzXWHq5Z6yoHqrTBjkzSk%2B7lixXE6TT5OLsv%2B79GizplUOYx%2Bff9Y2%2Fs%2BRQAKlLaWfgqmWMPFdDDYV4lDEu1U4xqUBl6A70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83013d331f1a5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/jquery.caret.js
172.67.172.49200 OK 1.2 kB URL GET HTTP/3 subscribe.goodlifestylenews.com/jquery.caret.js
IP 172.67.172.49:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
File type ASCII text, with CRLF line terminators
Hash 35c3ec8db4ff6e862db42516436216a1
7d9d7731403868cc34edaad1d9e17311541a6f77
adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Cookie: PHPSESSID=cb08c0290cdcf7f96d28b0ab2711604e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Mon, 01 Jan 2024 22:30:14 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 107225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LcHTvSQ5oig5mD9I8536jl4omcPpLgwq6H2Yax9PsmpuevyUEKy1JjQBkbgao8tCtOnxivWkZQEASRX5ZnCZIPeAtKHp6%2FjoJNrddAmS4Q8YG5SERdVVpYSoC3cfF1pF4iPdB4uD3Fe%2FOfiWyEQxomte"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83013d32bf2eb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
104.21.66.20200 OK 1.1 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
IP 104.21.66.20:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3\012- data
Size 1.1 MB (1114284 bytes)
Hash b02e84cdcd5a3e55ded5e64dfd307124
bfaad4b8b4b1b1fafffeda314b8868c94e7280c8
d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=2592000
expires: Sun, 31 Dec 2023 20:39:28 GMT
cf-cache-status: HIT
age: 200271
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X7dkXpOaRNbpw24I6NWLlgNWwJ5ceApgzwdmkFRCKXNIMrA9uFihDGGBHj7cdBczOstSd22D7NU80REgHybRb2iJo7JrFMT610rc4TgomEJKl25T2W%2B1YHcJRKmP89pFaNloeQb%2BBMA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83013d331f1b5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
104.21.66.20200 OK 1.3 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
IP 104.21.66.20:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06 DIY-Thermocam raw data\012- (Lepton 2.x), scale 10000-0, spot sensor temperature 0.000000, unit fahrenheit, color scheme 0, calibration: offset 0.000000, slope 795520.062500], baseline, precision 8, 1800x2700, components 3\012- data
Size 1.3 MB (1288007 bytes)
Hash 91e68c3d20f4e55b01fdbaa834b4e4e6
e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f
3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=2592000
expires: Sun, 31 Dec 2023 20:39:28 GMT
cf-cache-status: HIT
age: 200271
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5p0QRlmELcOGg0NjKYIWmh%2B3q6jZC%2FbYQjX2dAjh02LneX0XcTmLzUxqrmJBg0p3gJTp%2FYR8i01PbXM9WuDF7mBbm74tjjzyiHJnjZpgbwj4rkpjZuq6XiK7dX4%2FzHbfyKUscum8LNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83013d331f1c5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
142.250.74.74200 OK 33 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP 142.250.74.74:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 343856
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
142.250.74.168200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
IP 142.250.74.168:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash adc9a24e1887860ec90def7d0aa14125
ac3b082ca50c9d300d1ffc4f17c8977f47463c98
7c20f32b079738c1e2bcb06f823ac244c24c1acf50d2f7db657dd0f430ee2b52
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 04:17:20 GMT
expires: Mon, 04 Dec 2023 04:17:20 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92991
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
172.67.75.248200 OK 36 kB URL GET HTTP/2 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 172.67.75.248:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2F:25:93:6F:A7:DB:DD:73:E9:8A:15:34:D0:CD:1D:A9:ED:D3:06:A1
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
File type PNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced\012- data
Hash 724c1e2ab214eefe0271ee598af8749a
b99bb085dd791488b061c423223318345c590f24
bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 04:17:20 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Tue, 26 Dec 2023 04:19:54 GMT
cf-cache-status: HIT
age: 691047
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QSQDBVJbW%2F26P5ZBHoXZGxYiLXUkL0DyKHfKkuKrjsYQRva4oQGJpeDvtf%2FsjJXEflmyxu7%2FFp8TVZeJTkx0O4GVUI4aaBfXCHy3Xnd4pd8Dl9Ft6lqRIUkMzp8d6l0g3zI%2FQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83013d356be1b503-OSL
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/Bank.jpg0a40ddf619e4a3ad57e0b7f317e86be716974591564f2c0539f6c695e61cacb24bb387346e
52.217.11.174200 OK 7.4 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Bank.jpg0a40ddf619e4a3ad57e0b7f317e86be716974591564f2c0539f6c695e61cacb24bb387346e
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3\012- data
Hash aefbfa5028cf4f49960baf1f0ac4fb01
bfa2ff78725054e6c544c180b4da32b57450f62b
fa41866d7c80c8076fea67cdc7e643e59c73bbb99a7d410b667b937ae5c6e12e
GET /autonewsuploads/Bank.jpg0a40ddf619e4a3ad57e0b7f317e86be716974591564f2c0539f6c695e61cacb24bb387346e HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: oLZvPnhYyQc0TzMN3ODXynYT+D6Ev0u96q+jAopUF0kAI8D+dZ3Qd8wKxKvCM5WNJFEqMtbc4xQ=
x-amz-request-id: 4MAND61BC1XPWDSB
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Mon, 16 Oct 2023 12:25:58 GMT
ETag: "aefbfa5028cf4f49960baf1f0ac4fb01"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 7411
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 343186
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
172.67.172.49200 OK 5.1 kB URL GET HTTP/3 subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
IP 172.67.172.49:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
Hash 0dbbb5873b895ea3be425af219cf85de
7b9dba563376d7dbd1c5b9b7064ab87eadad5591
02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Cookie: PHPSESSID=cb08c0290cdcf7f96d28b0ab2711604e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 09:39:45 GMT
cache-control: max-age=2592000
expires: Mon, 01 Jan 2024 22:30:14 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 107225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3z2uhGzWHdhwM%2F%2FtbfhIXwU%2FSBZFr8sWbCXVj0ZUi8V8Cka61h%2ByY0dsGhCWes94pYbSmFXR91BYDJ8spgA4RUgSiz9NL70wWOLYuCDT%2FuiE4KX4WiZ86gC00S2TpNFd634g94ynR7PmVGHEwjak6byp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83013d32bf30b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
s3.us-east-1.amazonaws.com/autonewsuploads/ezgif-5-47919b4e02.jpgffb0eb30c8d21b616192c59bd9b267b01695206154bb376183b29959874d4a6ac12b7f8c39
52.217.11.174200 OK 62 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/ezgif-5-47919b4e02.jpgffb0eb30c8d21b616192c59bd9b267b01695206154bb376183b29959874d4a6ac12b7f8c39
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, comment: "Converted from WebP to JPG using ezgif.com", baseline, precision 8, 1280x918, components 3\012- data
Hash 69ffe21ab69a1f498139801e2fc5f354
191bbdbe52cadfe052b4e47b939ad7153b30b7a5
3e0ffd80bd501e99f6b6ba95b9702232a54576fce0335989ad12947e42b68f9a
GET /autonewsuploads/ezgif-5-47919b4e02.jpgffb0eb30c8d21b616192c59bd9b267b01695206154bb376183b29959874d4a6ac12b7f8c39 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 0JCoHgcUS2B94VRnyauGwo3Tphgc09F2triLtbS2d6q0ysUQIdCaoJsYhqW4VoyzUWiL9EQmGaE=
x-amz-request-id: 4MAR8F7FFVWRTSA8
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Wed, 20 Sep 2023 10:35:55 GMT
ETag: "69ffe21ab69a1f498139801e2fc5f354"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 61682
s3.us-east-1.amazonaws.com/autonewsuploads/48840943791_d5e5b61c77_b.jpg1297b512d8662dfc3d25bd3ed04913e4170126007173095a81318d6711280b20d78087dea6
52.217.11.174200 OK 238 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/48840943791_d5e5b61c77_b.jpg1297b512d8662dfc3d25bd3ed04913e4170126007173095a81318d6711280b20d78087dea6
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1024x683, components 3\012- data
Size 238 kB (238484 bytes)
Hash 7cd76f96de3fb0e688dbfdafb56a0f6b
c4bad117d40060ed4283626d1f653d755e21d372
0972fe50db49f3f941e277442292331790f6ee7c1d4ba0c746d8914b3a6ffe42
GET /autonewsuploads/48840943791_d5e5b61c77_b.jpg1297b512d8662dfc3d25bd3ed04913e4170126007173095a81318d6711280b20d78087dea6 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 6cQCUeLTocpUxwAwl1XQmjrsyWA0keZv+BnDcc1YzTEBMHCFJW5gwdQBTTB0recCGVvxtmvOjQk=
x-amz-request-id: 4MASZXCKFDQDJK2P
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Wed, 29 Nov 2023 12:14:29 GMT
ETag: "7cd76f96de3fb0e688dbfdafb56a0f6b"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 238484
s3.us-east-1.amazonaws.com/autonewsuploads/Gut.jpg37dc460a82121b617a1a702ee6e6306f17012596895396e590d68e24bb18de239e2bfd0db1
52.217.11.174200 OK 4.8 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Gut.jpg37dc460a82121b617a1a702ee6e6306f17012596895396e590d68e24bb18de239e2bfd0db1
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3\012- data
Hash 311808b48e4676144487147f09ab9579
b61f3384ee141750dd214f06481398cd2581f591
05e4ea557e9b35a715517550f3e52b6f92c5d4c52879a9a6ac5968aa0576334c
GET /autonewsuploads/Gut.jpg37dc460a82121b617a1a702ee6e6306f17012596895396e590d68e24bb18de239e2bfd0db1 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: oJ0VWqyA7wXxSwrGmElcnNgXFUpJLCJzszh08DRlKSAGg5BkJlxxap7h2UPwHgsAdivzFkajrMY=
x-amz-request-id: 4MAWZ2HXK2PHNKWQ
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Wed, 29 Nov 2023 12:08:07 GMT
ETag: "311808b48e4676144487147f09ab9579"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 4755
s3.us-east-1.amazonaws.com/autonewsuploads/a-stirring-depiction-of-elon-musk-clad-in-classic-mma-gear-throwing-a-punch-wi-itmc4evu.jpeg933bd6b557d44afce69efb0cfe2d4737170074687213b948a933c643954c82d8a78828e16c
52.217.11.174200 OK 551 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/a-stirring-depiction-of-elon-musk-clad-in-classic-mma-gear-throwing-a-punch-wi-itmc4evu.jpeg933bd6b557d44afce69efb0cfe2d4737170074687213b948a933c643954c82d8a78828e16c
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, progressive, precision 8, 4368x2448, components 3\012- data
Size 551 kB (551284 bytes)
Hash 38f25a132b00ce95958ffe1a19a73b4d
d1d0eb23050fe77cfd735bc419e1e9c68ebaa7a7
6199885a9e56d247710d81b2d1b1acf8b1259e46120b2f384e5ffaa146334985
GET /autonewsuploads/a-stirring-depiction-of-elon-musk-clad-in-classic-mma-gear-throwing-a-punch-wi-itmc4evu.jpeg933bd6b557d44afce69efb0cfe2d4737170074687213b948a933c643954c82d8a78828e16c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: GsizDzg/nuK5nNzEBEjk/zROgMvPg09LLMYLaRx7m5YpJDUdR8JpjtIoFW48Hc0vg2W3wy6Fy00=
x-amz-request-id: 4MAQJGVWR2S0AH7P
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Thu, 23 Nov 2023 13:41:14 GMT
ETag: "38f25a132b00ce95958ffe1a19a73b4d"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 551284
s3.us-east-1.amazonaws.com/autonewsuploads/OXFPlan2011231.jpgc3b0898c2d39f70828f0c9e84dcc746d17011772312302f4504c22831ca7bc8392a50bc6b0
52.217.11.174200 OK 292 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/OXFPlan2011231.jpgc3b0898c2d39f70828f0c9e84dcc746d17011772312302f4504c22831ca7bc8392a50bc6b0
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=122, yresolution=130, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2021:03:15 16:18:13], baseline, precision 8, 795x447, components 3\012- data
Size 292 kB (291621 bytes)
Hash df56b5f8da9d9f6fb399557d91e172b8
ae1e7e46cb188bd9d859a6db07e99fd335e290ba
80709be787335d411d2c0c46e523063530192968dbf0eace2bb52365bd678cd0
GET /autonewsuploads/OXFPlan2011231.jpgc3b0898c2d39f70828f0c9e84dcc746d17011772312302f4504c22831ca7bc8392a50bc6b0 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: K/T667jlH+QZlO84jv2P+vUiEA7WKtddShZI9k6txNj9g/rGITKG1TNHq2YyC9qDsSJhIx1Y3o0=
x-amz-request-id: 4MAV2361EZQ9CS4X
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Tue, 28 Nov 2023 13:13:53 GMT
ETag: "df56b5f8da9d9f6fb399557d91e172b8"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 291621
s3.us-east-1.amazonaws.com/autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c
52.217.11.174200 OK 204 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1406x874, components 3\012- data
Size 204 kB (203815 bytes)
Hash 6a6adfe1bedc4da72b469a28d4e46116
3de5b170433f48069754754669399303541edd93
78072f4da7459db2a9a896a335a876ccf2b0cbc20b4cd06674bf8ceacf41e499
GET /autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: qmzGASxf0qfa8UPv3/KavIrjUTAYfsGnS0CSAs9U0TUpKIbjW+ityVqC3UVeW9KnyfftWiikwjc=
x-amz-request-id: 4MAXXATXJMK9MX97
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Thu, 18 May 2023 11:46:53 GMT
ETag: "6a6adfe1bedc4da72b469a28d4e46116"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 203815
s3.us-east-1.amazonaws.com/autonewsuploads/star.jpg90204e147e6d64f8ab69d6d520abccc11700222099fe918358c5e7da3579e34bce0b06e5d1
52.217.11.174200 OK 108 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/star.jpg90204e147e6d64f8ab69d6d520abccc11700222099fe918358c5e7da3579e34bce0b06e5d1
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1024x768, components 3\012- data
Size 108 kB (108371 bytes)
Hash 9bfddae12d6576e1273a3d534eeb8417
7c751152ae489dcecc60390187bd79c30070454c
ae16f18fffbfa346cbcded1754f01d84330068d4c8521e66bce7e6e55d8ab7cb
GET /autonewsuploads/star.jpg90204e147e6d64f8ab69d6d520abccc11700222099fe918358c5e7da3579e34bce0b06e5d1 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 5A3aVlPFpN4PLMacUrAENYwquTyLEipH4oiaoNL2RFFo7YoYLlg/ZOTP1NGUPc5r7h2w05QgA+U=
x-amz-request-id: 4MAW7XTTH27F0EBE
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Fri, 17 Nov 2023 11:54:58 GMT
ETag: "9bfddae12d6576e1273a3d534eeb8417"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 108371
s3.us-east-1.amazonaws.com/autonewsuploads/MWLDark11231.png05e169c244ee73c9146485c1094a75c41701177138d8e903bca5ca5023879538c4f672ec1a
52.217.11.174200 OK 231 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/MWLDark11231.png05e169c244ee73c9146485c1094a75c41701177138d8e903bca5ca5023879538c4f672ec1a
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type PNG image data, 1782 x 531, 8-bit/color RGB, non-interlaced\012- data
Size 231 kB (230697 bytes)
Hash ffcc0938460c10b288e32060977a8eb2
2717fa86974c516b46f54ec978473ea78ff66179
6414a8bcdf55e29557d06a716e8b54797735bc415e781d457d6b146eabccbe03
GET /autonewsuploads/MWLDark11231.png05e169c244ee73c9146485c1094a75c41701177138d8e903bca5ca5023879538c4f672ec1a HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: uae+ingRPjhaG6/jWGeK7DUcX+aqEqiIGdFvAeXVTwRK2Az+yHup9BRSwePNpYxkCub3MxwELQw=
x-amz-request-id: 4MAG4PRYA46FVD0F
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Tue, 28 Nov 2023 13:12:20 GMT
ETag: "ffcc0938460c10b288e32060977a8eb2"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 230697
s3.us-east-1.amazonaws.com/autonewsuploads/Nvidia-RTX-4080-scaled.jpgb70d6068ffd7155d496f9df2a79e45e01698405532e271b8c24f61f35b61dfe8575fb3c05f
52.217.11.174200 OK 403 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Nvidia-RTX-4080-scaled.jpgb70d6068ffd7155d496f9df2a79e45e01698405532e271b8c24f61f35b61dfe8575fb3c05f
IP 52.217.11.174:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 2560x1440, components 3\012- data
Size 403 kB (402863 bytes)
Hash cdb933a74330f49abf98bc4482702b0b
477a1894508966e788cd0d11c57900da6241bf20
9c48355beb7e07f339f26d028347a0446d0ef9d9d3fe6251ace74429a480b3df
GET /autonewsuploads/Nvidia-RTX-4080-scaled.jpgb70d6068ffd7155d496f9df2a79e45e01698405532e271b8c24f61f35b61dfe8575fb3c05f HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: nGFjO6qt2p0APsOkXvPUWwgzqhR+eM2d/r+YVpL2RByZXeZEXaWP7OApdSJMagTriCQI4MIBnEs=
x-amz-request-id: 4MAHMRYEXYZZCDQ9
Date: Mon, 04 Dec 2023 04:17:21 GMT
Last-Modified: Fri, 27 Oct 2023 11:18:51 GMT
ETag: "cdb933a74330f49abf98bc4482702b0b"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 402863
subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
172.67.172.49200 OK 31 kB URL User Request GET HTTP/3 subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=cb08c0290cdcf7f96d28b0ab2711604e
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 04:17:19 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HoCxoCnODuYwEbSONCuVL%2Bl7bz4xl57kJ1zpWnofGqmW2wlMjSNvR8Aq2ceI2eY%2F5%2F2M4sdmS9q8%2F6GemhYnTKyFxEoOgZo3N%2BYBnR1Owgs9yc4uD7xmJafNIwdxdZPnqwOxitRKkk%2FlyT0PLnBG8b%2Bx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83013d2a1bc9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
verifiedwebpage.com/go?ehash=00901a7b4fd8ba24da0105e2628d5613&product=17712&ar=55&cid=1718&lid=1610&slhash=a0937bfc5dee4bef30b86a9d0d073803&redirect_id=14735&bid=17
104.21.55.80302 Found 31 kB URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=00901a7b4fd8ba24da0105e2628d5613&product=17712&ar=55&cid=1718&lid=1610&slhash=a0937bfc5dee4bef30b86a9d0d073803&redirect_id=14735&bid=17
IP 104.21.55.80:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=00901a7b4fd8ba24da0105e2628d5613&product=17712&ar=55&cid=1718&lid=1610&slhash=a0937bfc5dee4bef30b86a9d0d073803&redirect_id=14735&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 04:17:16 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=33b88bac7110ffb2d02dea239b251b65; path=/
pixel_session_hash_17712=3414810360501252106; expires=Wed, 03-Jan-2024 04:17:17 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_17712=a258aa7bb72641ac6b8af6cfccc58861d8cd57fec6048fa6a9c3d6b60e7ce0f9; expires=Wed, 06-Dec-2023 04:17:17 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HV7DJkFGpWkUqVajKBs99oBBOz9M2sxGqjn2DxL6BW%2Fl6aE1ZP9TGFFPLch1knPyrRkASiOabjUDP7Idg%2FjjmRvotqvJbQiWYt3BIUjChDBa14oSwuYcGGZp0s%2Bqpty5NXIS98gz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83013d1bce505695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17
172.67.172.49302 Found 31 kB URL User Request GET HTTP/3 subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 04 Dec 2023 04:17:18 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=cb08c0290cdcf7f96d28b0ab2711604e; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlHFEvHbHQtOJawphBn2rdnPZMgZ1KjrCpeGC2GGLhvrCftCPQtLqkrlh20coI2cRLao0szToAOGWOJvwt5txWq4Z8UbuO%2Bqsmaf%2BivY4KXa2MwP0cqzHOzUYbFCyurv5XU6G%2Btw5uds6cwxLqv9TJ%2B%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83013d210fe4b527-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto
142.250.74.106200 OK 2.1 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto
IP 142.250.74.106:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2158), with no line terminators
Hash 7fad5e7e182f10e7ece237afa8caae03
3e446dd2d5f5a34d3e6a55063ef740fe292a42a1
5b353f7d4f4359ff0b19d42c322ddf1e4cb8b350644d3c7daefc39739ba114f0
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 04:17:20 GMT
date: Mon, 04 Dec 2023 04:17:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/favicon.ico
172.67.172.49404 Not Found 315 B URL GET HTTP/3 subscribe.goodlifestylenews.com/favicon.ico
IP 172.67.172.49:443
Requested by https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subscribe.goodlifestylenews.com/?email=oramey@lewisreedallen.com&redirect_id=14735&bid=17&ses_id=a85ffc7295f72669a7607f7c2bb6ade6
Cookie: PHPSESSID=cb08c0290cdcf7f96d28b0ab2711604e; _ga_WJJ5P9F2X8=GS1.1.1701663445.1.0.1701663445.0.0.0; _ga=GA1.1.936411653.1701663446
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 04:17:21 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4FWU18d7lTXP0JkL%2FDY8QSUFLbEuXRDQPY8Knoaw6GzhGhYsShUG2yIDm0LgQyJBU5eZrlJ51dRoKq2OU1ShuaYLcYB%2B7OF6O6avB1lxKGSf1hz6jFP7BHtkSarAdzP%2B2uMM%2Fjv3H3K4CrXvktA8d0AS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83013d3b3a95b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.goodlifestylenews.com/dummyarticleclickers_14735/00901a7b4fd8ba24da0105e2628d5613/55/leadsource/1718/1610/a0937bfc5dee4bef30b86a9d0d073803/conid/news/14735/17
172.67.172.49302 Found 31 kB URL User Request GET HTTP/2 go.goodlifestylenews.com/dummyarticleclickers_14735/00901a7b4fd8ba24da0105e2628d5613/55/leadsource/1718/1610/a0937bfc5dee4bef30b86a9d0d073803/conid/news/14735/17
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dummyarticleclickers_14735/00901a7b4fd8ba24da0105e2628d5613/55/leadsource/1718/1610/a0937bfc5dee4bef30b86a9d0d073803/conid/news/14735/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 04:17:16 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=00901a7b4fd8ba24da0105e2628d5613&product=17712&ar=55&cid=1718&lid=1610&slhash=a0937bfc5dee4bef30b86a9d0d073803&redirect_id=14735&bid=17
cache-control: max-age=600
expires: Mon, 04 Dec 2023 04:27:16 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gv17GRE7waN5RTpVbp7y14PeFxcRFb%2F42QyoSgNmk5nNANLdIBzo5UH0LNoh%2FMg4K3x2KThONROXBd9GeNKwXEH7otRkWhFl%2FgA2DIPyue4ZAC7tvLoQIiKgmDyk%2FTnS%2FR1ZDdQN5ds58tQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83013d175f3c56aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2