GET verifiedwebpage.com/go?ehash=1c8b04fab96e09b9a931040818f528ca&product=50029&ar=55&cid=2668&lid=1610&slhash=11e2f6decff62c4d260809bf10c4d61e&redirect_id=46563&bid=17
104.18.20.187302 Found 503 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=1c8b04fab96e09b9a931040818f528ca&product=50029&ar=55&cid=2668&lid=1610&slhash=11e2f6decff62c4d260809bf10c4d61e&redirect_id=46563&bid=17
IP 104.18.20.187:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hash 907a8c5e1bcb3301f77273e9a1aa165a
37cbbcafb928f042c1d6dfbf9a0ff873f75d13eb
8e0a40de4397023a7bed68d70de99b4bc653f86d4e80a6303b2b8599dfea5feb
GET /go?ehash=1c8b04fab96e09b9a931040818f528ca&product=50029&ar=55&cid=2668&lid=1610&slhash=11e2f6decff62c4d260809bf10c4d61e&redirect_id=46563&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 24 May 2024 22:54:03 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=yamara@outbrain.com&redirect_id=46563&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=0b8aadacfd2066271d94ea94fe13dcb5; path=/
pixel_session_hash_50029=3415497837746626788; expires=Sun, 23-Jun-2024 22:54:02 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_50029=a7e42d8bd5844c1f5c5741a58712c59e358dde6e1c95677af167e29374d7bd10; expires=Sun, 26-May-2024 22:54:02 GMT; Max-Age=172800
__cf_bm=RpbBnp1OIS1iXFXUVoK_W5DtLBq1dvgrMdpGu.z0CBE-1716591243-1.0.1.1-0e61pqO94cWqjuUA7y6NvdkcsWUGHUQ4WqAssq6cxNj.8l8l.D1ytaTqc00rpvNh_QvvZRY_KowlWsC_lbrIFw; path=/; expires=Fri, 24-May-24 23:24:03 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8890dd833986b4f9-OSL
X-Firefox-Spdy: h2
go.goodlifestylenews.com/
172.67.172.49 143 B URL go.goodlifestylenews.com/
IP 172.67.172.49:0
File type HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 May 2024 22:54:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tApvfpkwywTS3Cy1fkT0gmFlCa0QDoY2%2BSVFkYUfBnaMj%2BYJ7YtV6vxgpALhNFJYLgxwr2iu2wXspKD1MgI0pobTakeW77uGVsoFn28kL5%2BbcP5uK9zRPJYFkg9CPgduUykiaiYDL5WohUQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8890dd938dde5694-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
GET subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
104.21.30.61200 OK 6.0 kB URL User Request GET HTTP/1.1 subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
IP 104.21.30.61:80
File type HTML document, Unicode text, UTF-8 text, with very long lines (393)
Hash f65a1747c6f09b2d372898ee7b5f6b7a
ec7b006f9d17a3f49e5bf690c484c48ddc11f0dc
0c8e251e71fe4fdb390eebd0ffc74d1c4724f6b173dda3e9b28160444f489b6f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=a1a203cbd5a49b0beb839f506da4ad36
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 May 2024 22:54:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=roTshzIV3gr4bbuqUTig7mABEAY5xrW%2BRbnQR9EHD%2FHYMqVbdJqxlV%2Ff8Mj0qEeqwvw%2FtFDCX45o6MLbpUdZYQLpgl1hyDhUgkSfWebpi0%2FT4hfhJNK3dc6L%2Fiv31A9OplRyXMw7z0dSX0qjGUr%2FgghM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8890dd963a7fb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
GET subscribe.goodlifestylenews.com/jquery.caret.js
104.21.30.61200 OK 716 B URL GET HTTP/1.1 subscribe.goodlifestylenews.com/jquery.caret.js
IP 104.21.30.61:80
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 35c3ec8db4ff6e862db42516436216a1
7d9d7731403868cc34edaad1d9e17311541a6f77
adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Cookie: PHPSESSID=a1a203cbd5a49b0beb839f506da4ad36
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 May 2024 22:54:06 GMT
Content-Type: application/javascript
Content-Length: 716
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Tue, 18 Jun 2024 22:54:05 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 432000
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FixQv%2Fk%2F05RalOuZBe%2FlaY7VpaYF5220Wp1fY6FxfbtkC0xYr%2F%2BaWnM967vG3TW%2FNh4UBhp7TPSRADyQUesJEBtYSN37sPPBtKBCFJWVa5PixyEUsyCbVev4f%2B76fav4TomeralmcaMcpEQyBVsDmPyY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8890dd9d8f45b51d-OSL
alt-svc: h2=":443"; ma=60
GET subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
172.67.172.49200 OK 4.4 kB URL GET HTTP/1.1 subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
IP 172.67.172.49:80
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
File type JavaScript source, ASCII text
Hash 0dbbb5873b895ea3be425af219cf85de
7b9dba563376d7dbd1c5b9b7064ab87eadad5591
02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Cookie: PHPSESSID=a1a203cbd5a49b0beb839f506da4ad36
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 May 2024 22:54:06 GMT
Content-Type: application/javascript
Content-Length: 4430
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Fri, 31 May 2024 00:22:16 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 2068310
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cXgbw9Qtw8TswMAomsFIL28gIInxmAbj5Uf4nBG1hZmf5P0LPDsE1%2Ffn2nhbCThnyjlrqjhtDro%2B7g2nk8y%2BtybbyQlAoKHgHOb1cVfBFSJJsikXATW%2BLld9yIdXwnwCGhTW0MxbG0nPs%2BdhkvOveGFf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8890dd9d9e79b500-OSL
alt-svc: h2=":443"; ma=60
GET cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
104.18.186.31200 OK 30 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP 104.18.186.31:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: text/css; charset=utf-8
content-length: 30336
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
x-served-by: cache-fra-eddf8230147-FRA, cache-lga21961-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1589827
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aFb9BEwYb6yA5Fw%2FVorinE7WYdH9ANB64IWskVr0UuW2JklTe%2FnFY8V8qrpXoICoEx6WUDRE4RC21nGpieNzFBzzjitoMQT2gxh5ISoUqoXsXzSTfQ6bQhcePnvMCrXplDg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8890dd9db9b81c12-OSL
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
104.18.186.31200 OK 17 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP 104.18.186.31:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (60201)
Hash c5236e5d6a5d0ff97ff8c8e5102c6c03
6fbfdbddbe85c578de559adcc8d07cccbc16d514
87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 17366
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
x-served-by: cache-fra-etou8220032-FRA, cache-lga21973-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1589828
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pBdz2P73oGDcst9qv9mkbh%2FSRpNj9QCuGs1P713HCObdn8PkzdOkfVB%2F1laKEkeq8eteUf9hTZNoF00W2GebtyRpbIRAVWpUdee%2FOpOxrViHBhLnH%2FiWiUDOnpxXmxbun8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8890dd9db9b91c12-OSL
X-Firefox-Spdy: h2
GET subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
104.21.66.20200 OK 144 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3
Size 144 kB (144253 bytes)
Hash e7eb0da863b2d3ead5846cdc3263a233
138225ea3d8ff08f07b046b858bf46bf2bba2e96
ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wupf81K6gowltHcRfAbu3CBTBhLulXEBhOn7bexTUKeD8cYaJ5WiK%2F9Kq5TWv8%2FxezFeRNbjQpxMTuWcB38XswEsgJxUIsfFmgr0DkwzF2EbJqs8c6v0Brud%2FFGuj7e8rF1Ir4KM05A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8890dd9dfe4e712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
104.21.66.20200 OK 400 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3
Size 400 kB (400505 bytes)
Hash b9a9621a927a5b9a9c71fdbb53bf8991
9c4cc398edb33da6a79e62701867cbf7fed4056d
d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NvZtMpmnSULxzwXWjsw%2FUWFEXwPK1O7oGU8%2B36SKPYMxXI2MTlFGdu9u81c0YMrTYdNhkaxHSEQxNH%2BY70LwTQB0%2BAsj%2FRLg7m26zpR%2BL%2BJfNT3sbSAVeHuq3TBA%2BJ3fb7JZnlw3HY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8890dd9dfe4a712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
104.21.66.20200 OK 1.1 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3
Size 1.1 MB (1114284 bytes)
Hash b02e84cdcd5a3e55ded5e64dfd307124
bfaad4b8b4b1b1fafffeda314b8868c94e7280c8
d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2B6MOsllM3YRcmdIw663Wmscg4RjBIx3yW6DsgE4OIR4BJ2W8Yx55nGjQVjPBmYQta%2FiEtledgoNlEh7ifoIhrhcav2EVV85tw3KOa7LQNiQ3lq%2F1xAf6unUzPku6S6zvvjB5UGzjWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8890dd9dfe4b712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
104.21.66.20200 OK 1.3 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
IP 104.21.66.20:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC8:3F:88:99:86:9B:20:E9:77:44:04:5F:4D:C8:B8:D2:23:5F:C5:D2
ValidityMon, 06 May 2024 01:45:00 GMT - Sun, 04 Aug 2024 01:44:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06], baseline, precision 8, 1800x2700, components 3
Size 1.3 MB (1288007 bytes)
Hash 91e68c3d20f4e55b01fdbaa834b4e4e6
e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f
3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prMZrPiG8br9D2oDhegnWlr3d2epAtxJNumLiSDUF%2B7IFRPmFwdKqQKMGiqRLyblz9Yr16rbNhmGoC1GK1x77WLLxPOeoS3n66CShhsbtSywC0DeKu%2FSg%2FidUWrdBHOFen9L1wPQTpA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8890dd9dfe4c712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
142.250.74.106200 OK 33 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP 142.250.74.106:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint58:16:76:D3:35:A7:C7:1B:68:67:E2:F5:33:04:0E:E9:CB:56:BD:77
ValidityMon, 06 May 2024 14:43:20 GMT - Mon, 29 Jul 2024 14:43:19 GMT
File type JavaScript source, ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 May 2024 08:46:29 GMT
expires: Fri, 23 May 2025 08:46:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 137258
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
142.250.74.168200 OK 102 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
IP 142.250.74.168:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint8C:4A:82:1E:00:9B:5C:E8:2B:28:8C:2B:B1:77:07:74:60:4F:7D:5E
ValidityMon, 06 May 2024 13:42:09 GMT - Mon, 29 Jul 2024 13:42:08 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Size 102 kB (102540 bytes)
Hash 5b8a1d06d8d4078b769eda1a05be2ca8
1ca9db4c4e68bf095224d077ca05f1e78a36396b
0883c5a30a88cd2309cbe2973194234c2ebed6c3441496a151042e0003903022
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 May 2024 22:54:07 GMT
expires: Fri, 24 May 2024 22:54:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102540
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
172.67.74.20302 Found 251 B URL GET HTTP/1.1 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 172.67.74.20:80
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
File type HTML document, ASCII text
Hash 73816d82cca56c187674258ec5b7bd5a
cd989502a8b941226bb7e5ddc0ff0b62621e701f
cc2b540f494c9f0eb7c7f31880eec48518729e92ffa9e7081eb70193baa985a5
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 24 May 2024 22:54:07 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
Cache-Control: max-age=14400
Expires: Fri, 24 May 2024 23:04:05 GMT
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BogF3%2FZ%2BvGjA2duKK3FvYvx%2BywV304ed07IL7ymvq7MeOdF3OjcKsgWMSN11HEH1yeHUM%2FWJLbbvRa9Wi1Bxm3OVlRSWhmXWDTBZJUTES38xekeXW%2BW5BG%2BuPe%2BxXnTlH58HBA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8890dda24f540b69-OSL
alt-svc: h2=":443"; ma=60
GET fonts.googleapis.com/css?family=Roboto
142.250.74.170200 OK 1.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto
IP 142.250.74.170:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint58:16:76:D3:35:A7:C7:1B:68:67:E2:F5:33:04:0E:E9:CB:56:BD:77
ValidityMon, 06 May 2024 14:43:20 GMT - Mon, 29 Jul 2024 14:43:19 GMT
File type gzip compressed data, max compression
Hash d99b0cd95b193be3295ad598084f5af0
2d61c4d3696268a81513c4b129aa0ca1e7725fb3
5f5477ccb9b31f2537dc538eeaee8f99e16342ec5edf9de66a3fb124eace1788
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 24 May 2024 22:54:07 GMT
date: Fri, 24 May 2024 22:54:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
172.67.74.20302 Found 36 kB URL GET HTTP/1.1 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 172.67.74.20:80
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
File type PNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced
Hash 724c1e2ab214eefe0271ee598af8749a
b99bb085dd791488b061c423223318345c590f24
bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 May 2024 22:54:07 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Mon, 10 Jun 2024 01:17:44 GMT
cf-cache-status: HIT
age: 1200982
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FXFE7f%2FdDl1mc%2FhBZu17EDRerPmutUit7nSeT2EvbpETu%2BFUVIRFDkoEJHBDcKhX2BHvvHVEvO%2BWUl3hRbJ4j7DXKUJxRhjKPaQi%2BlY4fMNINeQ74cRhwwbHvpPbaqTu6MrzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8890dda32ad756bf-OSL
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C
ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 May 2024 08:36:46 GMT
expires: Fri, 23 May 2025 08:36:46 GMT
cache-control: public, max-age=31536000
age: 137841
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET s3.us-east-1.amazonaws.com/autonewsuploads/0.706704001675424608GlucoShield0123.jpg
54.231.134.96200 OK 92 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/0.706704001675424608GlucoShield0123.jpg
IP 54.231.134.96:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1440x810, components 3
Hash 16f8ad3b1597bdff74a88695fdc0743d
dd3b404d218c6e280a8f426841f0530e6a4d91e0
16ccba969218fb58843b7f903875653c895d75b6bd3240947a076028c9b56386
GET /autonewsuploads/0.706704001675424608GlucoShield0123.jpg HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: amkdrpZlnmcwBmNPSb6cDv0KEC3Q/44p9Dif8EdvynqR/Dn07cvBnkgF6oW4snYXxC2h+BnUfg8=
x-amz-request-id: VH3M0HK4H3QKN2TT
Date: Fri, 24 May 2024 22:54:08 GMT
Last-Modified: Wed, 08 Mar 2023 14:23:52 GMT
ETag: "16f8ad3b1597bdff74a88695fdc0743d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 91811
GET s3.us-east-1.amazonaws.com/autonewsuploads/brain-3439067_1280.jpg1f7b62c0157bfe175bd08b2a717b59071714131840bb7a604ae461f6b2fbf21fdc1364bb5f
54.231.134.96200 OK 92 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/brain-3439067_1280.jpg1f7b62c0157bfe175bd08b2a717b59071714131840bb7a604ae461f6b2fbf21fdc1364bb5f
IP 54.231.134.96:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x704, components 3
Hash 20d31f7756b41de696671cb78f7ce21c
a13f809e51cd626448a424b365fe7389a3e50169
d944248901372ee9a00a0d16025b43f10b58f332694d5ef7309202c4533947eb
GET /autonewsuploads/brain-3439067_1280.jpg1f7b62c0157bfe175bd08b2a717b59071714131840bb7a604ae461f6b2fbf21fdc1364bb5f HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: SUdDWFjj+4C9crk97byIjOvj3CmCIkBzQ919tMQ7rNbXX5WVAz3PaSQjpWFo1K8HYMfFwDZPgNk=
x-amz-request-id: JKFG8E0EMHC5JJ0B
Date: Fri, 24 May 2024 22:54:09 GMT
Last-Modified: Fri, 26 Apr 2024 11:44:02 GMT
ETag: "20d31f7756b41de696671cb78f7ce21c"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 91471
GET s3.us-east-1.amazonaws.com/autonewsuploads/Stocks-market.jpgcf80e31c6ad10de5e6280c53df69714817012596786f17f2e95af5b96824c9244fbf3de92e
54.231.134.96200 OK 239 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Stocks-market.jpgcf80e31c6ad10de5e6280c53df69714817012596786f17f2e95af5b96824c9244fbf3de92e
IP 54.231.134.96:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 800x449, components 3
Size 239 kB (238568 bytes)
Hash 151f7b57989c1ac43df20f947bfd3000
76f1455c30d8e65ca53b0b0bc8dac1dfa2fd7415
3f866225f1586fca63e052308c9f334bf5290ebb0e1029e8299a5c6ac4d91c14
GET /autonewsuploads/Stocks-market.jpgcf80e31c6ad10de5e6280c53df69714817012596786f17f2e95af5b96824c9244fbf3de92e HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: JecE8KYo3NWFQSmCA/mKuE49SWk4xsa2EimoueDAxTJab5zpP7fj4aUx0CffRz9H5gDcs0F+Myw=
x-amz-request-id: JKFRFZABPBKVFTTN
Date: Fri, 24 May 2024 22:54:09 GMT
Last-Modified: Wed, 29 Nov 2023 12:07:56 GMT
ETag: "151f7b57989c1ac43df20f947bfd3000"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 238568
GET s3.us-east-1.amazonaws.com/autonewsuploads/Inheritance-in-Georgia-how-to-get-Inheritance-in-Batumi.jpgdf9dd00828bfeac22ece7f90caf36c6a17157708000dabd1d0041adcb91f8a3564df2d6e60
54.231.134.96200 OK 409 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Inheritance-in-Georgia-how-to-get-Inheritance-in-Batumi.jpgdf9dd00828bfeac22ece7f90caf36c6a17157708000dabd1d0041adcb91f8a3564df2d6e60
IP 54.231.134.96:443
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2400x1600, components 3
Size 409 kB (408633 bytes)
Hash 8fb4e0d6f6a471bc5cf1864438b1d687
59140edaf162e34790d5e1e3a3af942c33c4ee1f
8fa90cd0c3531419ea554df5ab58c1a82a845b1c966991fdb93c4a310e681272
GET /autonewsuploads/Inheritance-in-Georgia-how-to-get-Inheritance-in-Batumi.jpgdf9dd00828bfeac22ece7f90caf36c6a17157708000dabd1d0041adcb91f8a3564df2d6e60 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: TlhAhxI5GmuccXl9iq4RpSb5lsVZsRpMUlUjQ85hvCfVqavfJd8v3tULzJIB+4IN2k6Sd6BN/po=
x-amz-request-id: JKFP22BA6FGH7PVW
Date: Fri, 24 May 2024 22:54:09 GMT
Last-Modified: Wed, 15 May 2024 11:00:02 GMT
ETag: "8fb4e0d6f6a471bc5cf1864438b1d687"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 408633
GET subscribe.goodlifestylenews.com/favicon.ico
172.67.172.49404 Not Found 238 B URL GET HTTP/1.1 subscribe.goodlifestylenews.com/favicon.ico
IP 172.67.172.49:80
Requested by http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
File type HTML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
Cookie: PHPSESSID=a1a203cbd5a49b0beb839f506da4ad36; _ga_WJJ5P9F2X8=GS1.1.1716591247.1.0.1716591247.0.0.0; _ga=GA1.1.794890455.1716591248
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 24 May 2024 22:54:08 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qpZlFjJTDu2DWceVTgyluTSKsp8%2FHW8WNOOuby3qx5lrdlY56GJH2UgakJhKJLpjtrJQGUqLh92ADUIYymHelHXd0eXSf8ezWx3roPV3ITYikkWMpyV1Oa%2FSnXtR3dTxSG966XGyoWNKyPL1SIrwrB%2FM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8890dda6fd16b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
GET subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17
104.21.30.61302 Found 0 B URL User Request GET HTTP/3 subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17
IP 104.21.30.61:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint48:67:72:70:7A:EA:50:4A:4D:18:E4:D7:58:E6:81:3A:B8:2E:FC:BF
ValiditySun, 19 May 2024 16:39:16 GMT - Sat, 17 Aug 2024 16:39:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?email=yamara@outbrain.com&redirect_id=46563&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 24 May 2024 22:54:04 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com/?email=yamara@outbrain.com&redirect_id=46563&bid=17&ses_id=9e4b62608aee7bf1b27350eab9e1ea2e
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=a1a203cbd5a49b0beb839f506da4ad36; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=103SF7N09fCzLzC0rjgfMRvqB1lyqNz%2BVVlqANbBcwGfQDqx9OBXKKKExpur%2FHpF8IkE6xf8XtzRXAeHgZr6fJJGfzRe4R%2Bi2bJgH8xsDzbh7XkLfwrnLSzt9ypntusix6rFszqE8hEDy4w9YuPmLLMk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8890dd893fbd712e-OSL
alt-svc: h3=":443"; ma=86400
GET go.goodlifestylenews.com/dummyarticleclickers_46563/1c8b04fab96e09b9a931040818f528ca/55/leadsource/2668/1610/11e2f6decff62c4d260809bf10c4d61e/mpmta/news/46563/17
104.21.30.61302 Found 0 B URL User Request GET HTTP/2 go.goodlifestylenews.com/dummyarticleclickers_46563/1c8b04fab96e09b9a931040818f528ca/55/leadsource/2668/1610/11e2f6decff62c4d260809bf10c4d61e/mpmta/news/46563/17
IP 104.21.30.61:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint48:67:72:70:7A:EA:50:4A:4D:18:E4:D7:58:E6:81:3A:B8:2E:FC:BF
ValiditySun, 19 May 2024 16:39:16 GMT - Sat, 17 Aug 2024 16:39:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dummyarticleclickers_46563/1c8b04fab96e09b9a931040818f528ca/55/leadsource/2668/1610/11e2f6decff62c4d260809bf10c4d61e/mpmta/news/46563/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 24 May 2024 22:54:02 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=1c8b04fab96e09b9a931040818f528ca&product=50029&ar=55&cid=2668&lid=1610&slhash=11e2f6decff62c4d260809bf10c4d61e&redirect_id=46563&bid=17
cache-control: max-age=600
expires: Fri, 24 May 2024 23:04:01 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBT2ToOZIoZkdsTjwXrQFeb3ftotP9F84qLOJXOSXTHG%2FKT%2Fj%2FgaKlKLy0XqRrOZcz%2BcakTYMjWVri0hWRYkXH7GMZA9a0DJECMLlFG9NDBU4JFgO%2FBVn6Un5FW1Wb7vJUa%2BPnTmFSEZHr0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8890dd80fa1456b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2