go.goodlifestylenews.com/
172.67.172.49 143 B URL go.goodlifestylenews.com/
IP 172.67.172.49:0
File type HTML document text\012- HTML document, ASCII text
Hash f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 23:55:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8PgSH8Bfkx2vZe1VPpMAuLnnkt9C0iRzEYF%2FxSW4ntaLSInBM9IIvSlzZBo1b1XB0COssaVeNkIkClQTDTfpqcwNtEwN%2FPQSc6%2BcA1g%2BINbdzn3MGjbGtl1HAlu4yXoM5pQpQRlBW7rZtWw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8307fa8d6de10b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
104.21.30.61 7.4 kB URL User Request GET subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
IP 104.21.30.61:0
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (393)
Hash df68f571f989aa83cb0ab8deba108f86
27f8994f600d84287c6d700f95d33be3ae577f5c
7cfffd3b4bc319683d8df4413ce26cafed96574b4f23b0ae893e124ad7cab983
GET /?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=cdb6bf8210fbcf4c9e068fcbf11250bb
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 23:55:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uiXEOQ5sWSiM4au6IcTfYVdSmBBQmbf7U6v7b8mAzs%2Bt9DAg64Z9uWgxuKuMaYOl80m58ff3kVfbEFzoo3RZ1ymsVE9gYFQmhMVqbRgWRzy50VKCnKJ%2BiIOSeaLjP9t%2FMSc9blgJHN5n%2BLvAgNaH%2FoQO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8307fa9188c4568d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
subscribe.goodlifestylenews.com/jquery.caret.js
104.21.30.61200 OK 716 B URL GET HTTP/1.1 subscribe.goodlifestylenews.com/jquery.caret.js
IP 104.21.30.61:80
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
File type ASCII text, with CRLF line terminators
Hash 35c3ec8db4ff6e862db42516436216a1
7d9d7731403868cc34edaad1d9e17311541a6f77
adef482d97f599ba0e720ecf2aba0581ea1591ba1bb1eb271f1d98b279ff81ba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.caret.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Cookie: PHPSESSID=cdb6bf8210fbcf4c9e068fcbf11250bb
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 23:55:12 GMT
Content-Type: application/javascript
Content-Length: 716
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Wed, 03 Jan 2024 23:55:01 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FEXmxePqLsCG0CUQJOcO3rywmN1BMr5Z8Lfmli86j3KgS%2BgJap7X7Jut5mVCHYQ%2FM9CmtoYJIGhEQdZ9GKYC1Dd%2FZ%2FDJx9YdHx1cKLwhBkQvv8uCwTcwWU6JlSl2QvOHlfLS1s9Rvfh0kV0cjJiJ%2B1yb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8307fa9a6ca1568d-OSL
alt-svc: h2=":443"; ma=60
subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
104.21.30.61200 OK 4.4 kB URL GET HTTP/1.1 subscribe.goodlifestylenews.com/jquery.mobilePhoneNumber.js
IP 104.21.30.61:80
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Hash 0dbbb5873b895ea3be425af219cf85de
7b9dba563376d7dbd1c5b9b7064ab87eadad5591
02cbbdeb2244fd2855c49ab964c15001bde126c21cc5890d176c537878d6152b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.mobilePhoneNumber.js HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Cookie: PHPSESSID=cdb6bf8210fbcf4c9e068fcbf11250bb
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 23:55:12 GMT
Content-Type: application/javascript
Content-Length: 4430
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 09:39:45 GMT
Cache-Control: max-age=2592000
Expires: Wed, 03 Jan 2024 23:55:01 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nYe4huJBYhZcq9hZGxeIDesELLZbPYAyvOYxj6UQop4Yi8l6TmeUgJwjp3yTfi6ZJspMrsER6rSYA8wsPUDr0Qfw9%2FJYZCOiTFCD3Voijzz4uVv%2Fb1iZJXSDX%2BS4GZW2ronRlx%2FUfGXWOGe4gTROTTxh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8307fa9a8d13712e-OSL
alt-svc: h2=":443"; ma=60
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
151.101.1.229200 OK 17 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP 151.101.1.229:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (60201)
Hash c5236e5d6a5d0ff97ff8c8e5102c6c03
6fbfdbddbe85c578de559adcc8d07cccbc16d514
87538c4b7e488f5a49d12f98d6a04afc61d00f26a790f319569799acd434eb65
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 23:55:12 GMT
age: 8447439
x-served-by: cache-fra-etou8220032-FRA, cache-bma1624-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17366
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
151.101.1.229200 OK 30 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP 151.101.1.229:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 025df1ec88740cad5ff14bb3380da6dd
7abed070e37ce060c0a561575f1d41a7f248fc74
2143941c03dacda8b4f1016ced6e0c6f34e5c04585a3bcffe33c3c626c448a4a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 23:55:12 GMT
age: 22848925
x-served-by: cache-fra-eddf8230072-FRA, cache-bma1624-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
172.67.155.79200 OK 144 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg
IP 172.67.155.79:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 966x1449, components 3\012- data
Size 144 kB (144253 bytes)
Hash e7eb0da863b2d3ead5846cdc3263a233
138225ea3d8ff08f07b046b858bf46bf2bba2e96
ff19a64983ac2748d6b8361212f1fc41814e1acd0d157ee9c736bbd2a4a03180
GET /uploads/0.4350600016769076711fa4a4d9-a4f8-451c-8bdc-8c541c15cb77.jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 23:55:12 GMT
content-type: image/jpeg
content-length: 144253
last-modified: Mon, 20 Feb 2023 15:41:11 GMT
cache-control: max-age=2592000
expires: Sun, 31 Dec 2023 20:39:28 GMT
cf-cache-status: HIT
age: 270944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nL%2BBYvA8HV8W1CJuOFxh1Yz6V8Vi0Pt5jdxT69A%2FA7okWVv9NVXGoQFQEZTtWpOJD98hXdZ2FRK4sBlWcoxdAiX%2BkgzyVa9YpNYWi%2FJYczxl%2BIxfLyTLH2MGreK4zfLZ29ITAJB2Ixw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8307fa9b290256be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
172.67.155.79200 OK 400 kB URL GET HTTP/2 subscriberwelcome.com/uploads/0.204734001673521892LifeAfterUkraine.jpeg
IP 172.67.155.79:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2550x3300, components 3\012- data
Size 400 kB (400505 bytes)
Hash b9a9621a927a5b9a9c71fdbb53bf8991
9c4cc398edb33da6a79e62701867cbf7fed4056d
d0342e1b39e1c9b80bfb574b18e0a5d9f9cf00e00ca7cf3b2ce1ded70f3bb9ab
GET /uploads/0.204734001673521892LifeAfterUkraine.jpeg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 23:55:12 GMT
content-type: image/jpeg
content-length: 400505
last-modified: Thu, 12 Jan 2023 11:11:32 GMT
cache-control: max-age=2592000
expires: Tue, 26 Dec 2023 04:19:52 GMT
cf-cache-status: HIT
age: 761719
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T8LtGoEIaoLGCEM8qePAsjF2u646TjJdObrIVOFBqmLpWu1MD2BT7MLye55g10OB5KpWj5XjMdUlGrMsDIKcC7pik85CoR2JlfmjzFWyX7jGqa%2FUVtl1%2FtDHhA%2FnymISKaZX9ROUnJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8307fa9b290656be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
172.67.155.79200 OK 1.1 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1663680016738854302D2(1).jpg
IP 172.67.155.79:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:10 16:36:41], baseline, precision 8, 1800x2700, components 3\012- data
Size 1.1 MB (1114284 bytes)
Hash b02e84cdcd5a3e55ded5e64dfd307124
bfaad4b8b4b1b1fafffeda314b8868c94e7280c8
d67985993c18e2a7b22a4193c0613a65096b3376d64539feb646739798d2cf5c
GET /uploads/0.1663680016738854302D2(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 23:55:12 GMT
content-type: image/jpeg
content-length: 1114284
last-modified: Mon, 16 Jan 2023 16:10:30 GMT
cache-control: max-age=2592000
expires: Sun, 31 Dec 2023 20:39:28 GMT
cf-cache-status: HIT
age: 270944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RhllIRoxQZTNQjH7JVE%2Fvcc8nxdM4T7HOBwAZMTtAfAb8h7CvZXvIWNmLUilosQQ%2BGIv38Bta5LxaAdoNpdlJ8BhRHV0JRO9HG3VLVEwj1qMYllAm3yHwaLzUI3tCtfsG5ag13ftnts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8307fa9b290456be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
172.67.155.79200 OK 1.3 MB URL GET HTTP/2 subscriberwelcome.com/uploads/0.1721950016738853872D1(1).jpg
IP 172.67.155.79:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subjectsubscriberwelcome.com
FingerprintC6:7F:1F:89:8E:A5:44:AC:06:4D:BF:22:DF:3C:A1:81:D5:ED:C8:12
ValiditySat, 11 Nov 2023 03:06:35 GMT - Fri, 09 Feb 2024 03:06:34 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2023:01:07 00:05:06 DIY-Thermocam raw data\012- (Lepton 2.x), scale 10000-0, spot sensor temperature 0.000000, unit fahrenheit, color scheme 0, calibration: offset 0.000000, slope 795520.062500], baseline, precision 8, 1800x2700, components 3\012- data
Size 1.3 MB (1288007 bytes)
Hash 91e68c3d20f4e55b01fdbaa834b4e4e6
e54e4ea7f042d2124aa1be976a6fe9d708bb4f9f
3cab775e25b68c23b905d547373476f046b0101e7cfdbd6f016e302f5a429988
GET /uploads/0.1721950016738853872D1(1).jpg HTTP/1.1
Host: subscriberwelcome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 23:55:12 GMT
content-type: image/jpeg
content-length: 1288007
last-modified: Mon, 16 Jan 2023 16:09:47 GMT
cache-control: max-age=2592000
expires: Sun, 31 Dec 2023 20:39:28 GMT
cf-cache-status: HIT
age: 270944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9berz%2Byvaj%2B63ht2%2BvW29uiXE5RZy3qnS8JfuIVwZ3YjnD%2BRgqaIrgpDA%2Fzq5BJP1dV1It5CzUR9ovgZFuJ8rD9v7udEi%2BJk5J0uAPofb28C7xk7%2FpzcTePqaaE10rt0jUyOpdTPWcA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8307fa9b290356be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.goodlifestylenews.com/dummyarticleclickers_32027/26e362900356b1f0ab849cc484346480/55/leadsource/2390/1610/f41422652a5122476707c1a72b7208c6/mpmta/news/32027/17
172.67.172.49302 Found 33 kB URL User Request GET HTTP/2 go.goodlifestylenews.com/dummyarticleclickers_32027/26e362900356b1f0ab849cc484346480/55/leadsource/2390/1610/f41422652a5122476707c1a72b7208c6/mpmta/news/32027/17
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
File type gzip compressed data, max compression\012- data
Hash 430e927c980ad4079de727fa59dd93f2
891aaada9a55a91292999f6d50fd300439905982
e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dummyarticleclickers_32027/26e362900356b1f0ab849cc484346480/55/leadsource/2390/1610/f41422652a5122476707c1a72b7208c6/mpmta/news/32027/17 HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 23:55:08 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=26e362900356b1f0ab849cc484346480&product=35344&ar=55&cid=2390&lid=1610&slhash=f41422652a5122476707c1a72b7208c6&redirect_id=32027&bid=17
cache-control: max-age=600
expires: Tue, 05 Dec 2023 00:05:08 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oMUptj5D9oNShVPvOIOfOWDrB9snmPcQp7zgh6Y1E8Xw1XzTl2kZTiGmis0FhgruLFLvrjbPgWMhzWXudwS5gdcbOrzJa%2F7zSa%2BaeC%2B0n0Pu1InsUjZh1mXjxedBHn7s%2B9sigi7s3eR4RaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8307fa7afeceb50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
104.26.14.168200 OK 251 B URL GET HTTP/2 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 104.26.14.168:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2F:25:93:6F:A7:DB:DD:73:E9:8A:15:34:D0:CD:1D:A9:ED:D3:06:A1
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 73816d82cca56c187674258ec5b7bd5a
cd989502a8b941226bb7e5ddc0ff0b62621e701f
cc2b540f494c9f0eb7c7f31880eec48518729e92ffa9e7081eb70193baa985a5
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Mon, 04 Dec 2023 23:55:12 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
Cache-Control: max-age=14400
Expires: Tue, 05 Dec 2023 00:05:02 GMT
CF-Cache-Status: HIT
Age: 11
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ln61C2szfPMJKYIsdEntpxIMx6h2EBtDewGzy%2BEceL1sWJIZnMo54%2F%2BCwrnE%2FxARWOYAzk08mKvxfT5pRsg43eFr7DhUo1XmtjYQYZXSMgZeQgarb0OGI7H2fFODOtNhRGDKMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8307fa9d8a567127-OSL
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
142.250.74.72200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-WJJ5P9F2X8
IP 142.250.74.72:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash c659dfe207311bb16ca436d7bc837c09
a9933752cc00d56c35d3ffbafdb7e5099bb72c3b
43be3098254114c6c9852d29af751e097e3787ada42892c830f81fd8fa1f947b
GET /gtag/js?id=G-WJJ5P9F2X8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 23:55:12 GMT
expires: Mon, 04 Dec 2023 23:55:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93095
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto
142.250.74.106200 OK 1.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto
IP 142.250.74.106:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash e44972428403a101a87c96a24b036581
7843d82d061a61f4b1901cd51058d50d7eeb35a4
3df475e665cd198c349d58f81b69280b37a47184535ffbcaa7016e12be15f6e4
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 23:55:12 GMT
date: Mon, 04 Dec 2023 23:55:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
104.26.14.168200 OK 36 kB URL GET HTTP/2 verifiedsecure.org/uploads/0.442373001673954581K_Sa3Nyg.png
IP 104.26.14.168:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2F:25:93:6F:A7:DB:DD:73:E9:8A:15:34:D0:CD:1D:A9:ED:D3:06:A1
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
File type PNG image data, 3369 x 257, 8-bit/color RGBA, non-interlaced\012- data
Hash 724c1e2ab214eefe0271ee598af8749a
b99bb085dd791488b061c423223318345c590f24
bba2a6dbda4e6833f68c21d84c0f9a09180ae9595b238c982da300cf448ab78c
GET /uploads/0.442373001673954581K_Sa3Nyg.png HTTP/1.1
Host: verifiedsecure.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 23:55:13 GMT
content-type: image/png
content-length: 35781
last-modified: Tue, 17 Jan 2023 11:23:01 GMT
cache-control: max-age=2592000
expires: Tue, 26 Dec 2023 04:19:54 GMT
cf-cache-status: HIT
age: 761720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0gUu9rTxv20UGcw%2FmtZdhvVbxHOwChQM%2B3%2FSYfmyMLY%2Bsrnq4c2nF9mHGdQ06aal0oQtB2PnhyuVoPoB6rETFQ2gwns966j0zXGlRTXq7O4bK6OABA1Jw4%2Fwd7MJRT7INRoIOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8307faa02eedb4ee-OSL
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/ezgif-5-47919b4e02.jpgffb0eb30c8d21b616192c59bd9b267b01695206154bb376183b29959874d4a6ac12b7f8c39
52.217.112.144200 OK 62 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/ezgif-5-47919b4e02.jpgffb0eb30c8d21b616192c59bd9b267b01695206154bb376183b29959874d4a6ac12b7f8c39
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, comment: "Converted from WebP to JPG using ezgif.com", baseline, precision 8, 1280x918, components 3\012- data
Hash 69ffe21ab69a1f498139801e2fc5f354
191bbdbe52cadfe052b4e47b939ad7153b30b7a5
3e0ffd80bd501e99f6b6ba95b9702232a54576fce0335989ad12947e42b68f9a
GET /autonewsuploads/ezgif-5-47919b4e02.jpgffb0eb30c8d21b616192c59bd9b267b01695206154bb376183b29959874d4a6ac12b7f8c39 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: h5Yx7xZVXn6p2c5bXu4F+R4YFFI/37fMLyeMD6KsRX+bXeS95Yr19fc7z3sphnwh9rnGQ0F2OM4=
x-amz-request-id: KWGS93D5FZDMHW60
Date: Mon, 04 Dec 2023 23:55:13 GMT
Last-Modified: Wed, 20 Sep 2023 10:35:55 GMT
ETag: "69ffe21ab69a1f498139801e2fc5f354"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 61682
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://subscribe.goodlifestylenews.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 413859
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/44579666601_42d8534793_b.jpg7f20bb04d7172eee0a908a14e79933fd170004983415442e74691c82db8b712aecd73961fa
52.217.112.144200 OK 270 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/44579666601_42d8534793_b.jpg7f20bb04d7172eee0a908a14e79933fd170004983415442e74691c82db8b712aecd73961fa
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 56x56, segment length 16, baseline, precision 8, 1024x586, components 3\012- data
Size 270 kB (269886 bytes)
Hash d5c34e173a5ca5387e2e3613874af0bd
61a399dd3e4a66284c6a0245f61cb18bab531e6e
13683ee8262e8789b60daeb8801acbc27efc650d707c0d98521c1bf3d641830e
GET /autonewsuploads/44579666601_42d8534793_b.jpg7f20bb04d7172eee0a908a14e79933fd170004983415442e74691c82db8b712aecd73961fa HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: yxhbYKvuJz+0jgHjQZNcVwcugpLofQgXnhWIjAwOyphN4sP+UmSe0O2+oATWefv0bOAZvgD/jaI=
x-amz-request-id: KWGPWH8NGFTSBH9Z
Date: Mon, 04 Dec 2023 23:55:13 GMT
Last-Modified: Wed, 15 Nov 2023 12:03:52 GMT
ETag: "d5c34e173a5ca5387e2e3613874af0bd"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 269886
s3.us-east-1.amazonaws.com/autonewsuploads/brain-question-mark-alzheimer-s-dementia.jpgd3b9145894056faa4166415e15d2be961694430315df6c7fe88b91f8023a79c5227f87ce7d
52.217.112.144200 OK 57 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/brain-question-mark-alzheimer-s-dementia.jpgd3b9145894056faa4166415e15d2be961694430315df6c7fe88b91f8023a79c5227f87ce7d
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x411, components 3\012- data
Hash e74025bd2eecb8252ceac3a05afebc14
4755887ea49ca99ffa88969ba3cfe477964bb657
9f6e0e7c57d4d0e44e8f78f3e869bdae21018fada51f0aebd517b7d1ddb4ad8f
GET /autonewsuploads/brain-question-mark-alzheimer-s-dementia.jpgd3b9145894056faa4166415e15d2be961694430315df6c7fe88b91f8023a79c5227f87ce7d HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Sstoa4z9xXQbs5WRbqbCWrUc83FS8utryXLgKg5KlIHIbMiPJnHMo8e4RtueFxq0kDBqFYjoPE4=
x-amz-request-id: KWGTD77CKFEHK7C6
Date: Mon, 04 Dec 2023 23:55:13 GMT
Last-Modified: Mon, 11 Sep 2023 11:05:16 GMT
ETag: "e74025bd2eecb8252ceac3a05afebc14"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 56708
s3.us-east-1.amazonaws.com/autonewsuploads/1_UDPtLHUTpusvLU623P8Q4w.jpgfa03f59feb5aafc96914e60f203723bd1701175864706fbe0323bed4fe7bfbea63c80b4bd2
52.217.112.144200 OK 37 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/1_UDPtLHUTpusvLU623P8Q4w.jpgfa03f59feb5aafc96914e60f203723bd1701175864706fbe0323bed4fe7bfbea63c80b4bd2
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=194, yresolution=202, resolutionunit=2], baseline, precision 8, 700x407, components 3\012- data
Hash 7dc0970c94d38362656a685966e8c51a
5f84d80b99d5126a08a6b683388f10537a111fa6
3abfc8a4ce739fdad6298c4b77e601bcf668d60e2d88de26b1d0f8977edc9d1e
GET /autonewsuploads/1_UDPtLHUTpusvLU623P8Q4w.jpgfa03f59feb5aafc96914e60f203723bd1701175864706fbe0323bed4fe7bfbea63c80b4bd2 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: vrO8kcTJJ4jeag2I44nSVIz/ZP7/1ANbGlxQOONhe8Qa92gZE8qRXfpYygCFeVAfO0j/BJlW0EY=
x-amz-request-id: KWGZHNQ5KQDESGYT
Date: Mon, 04 Dec 2023 23:55:13 GMT
Last-Modified: Tue, 28 Nov 2023 12:51:05 GMT
ETag: "7dc0970c94d38362656a685966e8c51a"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 36685
s3.us-east-1.amazonaws.com/autonewsuploads/Pain.jpgdc109b002c390d3333aeb8ed25f423381697713046c394d3bafefd79d3e47b28186ccf892b
52.217.112.144200 OK 5.5 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Pain.jpgdc109b002c390d3333aeb8ed25f423381697713046c394d3bafefd79d3e47b28186ccf892b
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 259x194, components 3\012- data
Hash f925a32a84eb8a6b3302437703102009
4ad5b8c0f159ff9cf76edbe932c5675eac845663
277d5d412a0e6d9691818b66f7455e65cea84f71f4b08efe9aef0b0a82281ecf
GET /autonewsuploads/Pain.jpgdc109b002c390d3333aeb8ed25f423381697713046c394d3bafefd79d3e47b28186ccf892b HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: +97bf5OnHWXN8c+9owByYFGcvupWizprs4go/ETTh5w+Ikw4C0YVCB6G8dJ/LWLQsiivOJKUlns=
x-amz-request-id: 273XKDRJ503NZ7V6
Date: Mon, 04 Dec 2023 23:55:14 GMT
Last-Modified: Thu, 19 Oct 2023 10:57:25 GMT
ETag: "f925a32a84eb8a6b3302437703102009"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 5455
s3.us-east-1.amazonaws.com/autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c
52.217.112.144200 OK 204 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1406x874, components 3\012- data
Size 204 kB (203815 bytes)
Hash 6a6adfe1bedc4da72b469a28d4e46116
3de5b170433f48069754754669399303541edd93
78072f4da7459db2a9a896a335a876ccf2b0cbc20b4cd06674bf8ceacf41e499
GET /autonewsuploads/oil%20stockkk.jpg0f79d7c6521fdc129b15c3b9aa1c3496168441041164a5612a54233b64b4245e271fc79d2c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: H/MdrJh9RVSmFfptzMXDxgillTiOIRsBmfzNuxc1Om1Gn2+uCrW0zWEn3kEu405r1LlQJKYy1xc=
x-amz-request-id: 273W5AH7GRSP5407
Date: Mon, 04 Dec 2023 23:55:14 GMT
Last-Modified: Thu, 18 May 2023 11:46:53 GMT
ETag: "6a6adfe1bedc4da72b469a28d4e46116"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 203815
s3.us-east-1.amazonaws.com/autonewsuploads/6942088868_1268d22cc6_b.jpg64ae2dee0d573a126daead9ca43b45a71701175677a0a6fd4a7d678dc4b10a8b0a442d79d3
52.217.112.144200 OK 134 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/6942088868_1268d22cc6_b.jpg64ae2dee0d573a126daead9ca43b45a71701175677a0a6fd4a7d678dc4b10a8b0a442d79d3
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1023x819, components 3\012- data
Size 134 kB (134207 bytes)
Hash becdf93dc43f24fb0ff3f43e2b90fd2e
4345bb2bbd92eee71e9cf26a2043255de44e80b5
61ce6d67e1a594135330a6a8a1f17ff27d0adbfe00d7dd32fc0cdb8644fdaa22
GET /autonewsuploads/6942088868_1268d22cc6_b.jpg64ae2dee0d573a126daead9ca43b45a71701175677a0a6fd4a7d678dc4b10a8b0a442d79d3 HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: cj7H3p3RUC/cJN/A8zDkOLytEh50MPGzqIZkGBWtAnUYFCJVuwAZwzPce8b2FIQ+p/ECXWrtIk8=
x-amz-request-id: 273QJE4YG9WMKJ31
Date: Mon, 04 Dec 2023 23:55:14 GMT
Last-Modified: Tue, 28 Nov 2023 12:47:59 GMT
ETag: "becdf93dc43f24fb0ff3f43e2b90fd2e"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 134207
s3.us-east-1.amazonaws.com/autonewsuploads/Bank.jpg0a40ddf619e4a3ad57e0b7f317e86be716974591564f2c0539f6c695e61cacb24bb387346e
52.217.112.144200 OK 7.4 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/Bank.jpg0a40ddf619e4a3ad57e0b7f317e86be716974591564f2c0539f6c695e61cacb24bb387346e
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3\012- data
Hash aefbfa5028cf4f49960baf1f0ac4fb01
bfa2ff78725054e6c544c180b4da32b57450f62b
fa41866d7c80c8076fea67cdc7e643e59c73bbb99a7d410b667b937ae5c6e12e
GET /autonewsuploads/Bank.jpg0a40ddf619e4a3ad57e0b7f317e86be716974591564f2c0539f6c695e61cacb24bb387346e HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: XBWXlZl++a0/kJ8EJ+54Vqg7vcWMnzeMpHnliJ/IMTGUEVb4zFWcckcy/LE26kgzYs4DKTVInuw=
x-amz-request-id: 273XPCYDBRYQ4E02
Date: Mon, 04 Dec 2023 23:55:14 GMT
Last-Modified: Mon, 16 Oct 2023 12:25:58 GMT
ETag: "aefbfa5028cf4f49960baf1f0ac4fb01"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 7411
subscribe.goodlifestylenews.com/favicon.ico
104.21.30.61404 Not Found 238 B URL GET HTTP/1.1 subscribe.goodlifestylenews.com/favicon.ico
IP 104.21.30.61:80
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Cookie: PHPSESSID=cdb6bf8210fbcf4c9e068fcbf11250bb; _ga_WJJ5P9F2X8=GS1.1.1701734118.1.0.1701734118.0.0.0; _ga=GA1.1.187632984.1701734119
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 04 Dec 2023 23:55:14 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kIdNX%2BHOdAQOxiww6EQQcrPALNqS7WS%2Fevax%2FYpKJoX86IDKVkIR3QfZdRkmDXBcf2%2FN2yf6FUHs0IG4Vk5FxzlWwAmZsLEJ4x1w1g3ohVtOOSAlk2PrtexddAfaCZxDXpz0SWizzLpbHI9h9YSWARm%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8307faa5aad5712e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com/cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1
162.125.71.15 213 kB URL ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com/cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1
IP 162.125.71.15:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 213 kB (212787 bytes)
Hash 670520755720fa053a763b3c20791e04
7dc82546a7444f1e3ed621b703024e560869fb67
eb16e6d2538f2306436b16cb9df8141305667c8c85bccea6be19ce148f1e23d0
GET /cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1 HTTP/1.1
Host: ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: attachment; filename="BidenBucks07#7.jpg"; filename*=UTF-8''BidenBucks07%237.jpg
content-security-policy: sandbox
etag: 1675266162900395d
pragma: public
referrer-policy: no-referrer
vary: Origin
x-content-security-policy: sandbox
x-content-type-options: nosniff
x-robots-tag: noindex, nofollow, noimageindex
x-server-response-time: 165
x-webkit-csp: sandbox
content-type: application/binary
date: Mon, 04 Dec 2023 23:55:14 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 212787
x-dropbox-response-origin: far_remote
x-dropbox-request-id: e04afae045134bb597b57b7472257b33
X-Firefox-Spdy: h2
s3.us-east-1.amazonaws.com/autonewsuploads/a-stirring-depiction-of-elon-musk-clad-in-classic-mma-gear-throwing-a-punch-wi-itmc4evu.jpeg933bd6b557d44afce69efb0cfe2d4737170074687213b948a933c643954c82d8a78828e16c
52.217.112.144200 OK 551 kB URL GET HTTP/1.1 s3.us-east-1.amazonaws.com/autonewsuploads/a-stirring-depiction-of-elon-musk-clad-in-classic-mma-gear-throwing-a-punch-wi-itmc4evu.jpeg933bd6b557d44afce69efb0cfe2d4737170074687213b948a933c643954c82d8a78828e16c
IP 52.217.112.144:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerAmazon
Subjects3.amazonaws.com
FingerprintA6:0A:22:E1:56:35:ED:0D:1D:46:99:79:4D:17:07:70:1F:EE:1D:B6
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type JPEG image data, progressive, precision 8, 4368x2448, components 3\012- data
Size 551 kB (551284 bytes)
Hash 38f25a132b00ce95958ffe1a19a73b4d
d1d0eb23050fe77cfd735bc419e1e9c68ebaa7a7
6199885a9e56d247710d81b2d1b1acf8b1259e46120b2f384e5ffaa146334985
GET /autonewsuploads/a-stirring-depiction-of-elon-musk-clad-in-classic-mma-gear-throwing-a-punch-wi-itmc4evu.jpeg933bd6b557d44afce69efb0cfe2d4737170074687213b948a933c643954c82d8a78828e16c HTTP/1.1
Host: s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: uTZJ9YLmsQ3wKD277dxdnMreb750W400hbbIAIGfJcG1vHB9RGocbobkZEcL3TjiXpNJesAn/3M=
x-amz-request-id: KWGZCPZ20J47V1FF
Date: Mon, 04 Dec 2023 23:55:13 GMT
Last-Modified: Thu, 23 Nov 2023 13:41:14 GMT
ETag: "38f25a132b00ce95958ffe1a19a73b4d"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 551284
www.dropbox.com/s/9kywb1xfr244qtl/BidenBucks07%237.jpg?dl=1
162.125.71.18302 Found 213 kB URL GET HTTP/2 www.dropbox.com/s/9kywb1xfr244qtl/BidenBucks07%237.jpg?dl=1
IP 162.125.71.18:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerDigiCert Inc
Subject*.dropbox.com
Fingerprint17:55:A3:E8:7A:9A:D8:FF:86:5A:8E:81:2C:30:73:6B:8A:88:10:43
ValidityTue, 31 Oct 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
Size 213 kB (212787 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/9kywb1xfr244qtl/BidenBucks07%237.jpg?dl=1 HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /s/dl/9kywb1xfr244qtl/BidenBucks07%237.jpg
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTUzNzQzMjc4MzIwMTQwOTgwMTg5OTkwNjQxMDk0MTY1Mjc5NTg5; Path=/; Expires=Sat, 02 Dec 2028 23:55:12 GMT; HttpOnly; Secure; SameSite=None
t=2-vqKX_-w1taRtbBwJrCbKI4; Path=/; Domain=dropbox.com; Expires=Thu, 03 Dec 2026 23:55:12 GMT; HttpOnly; Secure; SameSite=None
__Host-js_csrf=2-vqKX_-w1taRtbBwJrCbKI4; Path=/; Expires=Thu, 03 Dec 2026 23:55:12 GMT; Secure; SameSite=None
__Host-ss=_BVo1cXZz8; Path=/; Expires=Thu, 03 Dec 2026 23:55:12 GMT; HttpOnly; Secure; SameSite=Strict
locale=en; Path=/; Domain=dropbox.com; Expires=Sat, 02 Dec 2028 23:55:12 GMT
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-robots-tag: noindex, nofollow, noimageindex
x-xss-protection: 1; mode=block
date: Mon, 04 Dec 2023 23:55:12 GMT
strict-transport-security: max-age=31536000; includeSubDomains
server: envoy
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 3b86a8dd5f5a4c229bf545d6321d4009
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
172.217.21.170200 OK 96 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP 172.217.21.170:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://subscribe.goodlifestylenews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:29:25 GMT
expires: Tue, 03 Dec 2024 20:29:25 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 12347
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com/cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1
162.125.71.15200 OK 213 kB URL GET HTTP/2 ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com/cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1
IP 162.125.71.15:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerDigiCert Inc
Subjectdl.dropbox.com
FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0
ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 213 kB (212787 bytes)
Hash 670520755720fa053a763b3c20791e04
7dc82546a7444f1e3ed621b703024e560869fb67
eb16e6d2538f2306436b16cb9df8141305667c8c85bccea6be19ce148f1e23d0
GET /cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1 HTTP/1.1
Host: ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: attachment; filename="BidenBucks07#7.jpg"; filename*=UTF-8''BidenBucks07%237.jpg
content-security-policy: sandbox
etag: 1675266162900395d
pragma: public
referrer-policy: no-referrer
vary: Origin
x-content-security-policy: sandbox
x-content-type-options: nosniff
x-robots-tag: noindex, nofollow, noimageindex
x-server-response-time: 165
x-webkit-csp: sandbox
content-type: application/binary
date: Mon, 04 Dec 2023 23:55:14 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 212787
x-dropbox-response-origin: far_remote
x-dropbox-request-id: e04afae045134bb597b57b7472257b33
X-Firefox-Spdy: h2
verifiedwebpage.com/go?ehash=26e362900356b1f0ab849cc484346480&product=35344&ar=55&cid=2390&lid=1610&slhash=f41422652a5122476707c1a72b7208c6&redirect_id=32027&bid=17
188.114.97.1302 Found 0 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=26e362900356b1f0ab849cc484346480&product=35344&ar=55&cid=2390&lid=1610&slhash=f41422652a5122476707c1a72b7208c6&redirect_id=32027&bid=17
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=26e362900356b1f0ab849cc484346480&product=35344&ar=55&cid=2390&lid=1610&slhash=f41422652a5122476707c1a72b7208c6&redirect_id=32027&bid=17 HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 23:55:09 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=302c14ffb99c8f412ef6cf5058de3dc8; path=/
pixel_session_hash_35344=3415202737506910173; expires=Wed, 03-Jan-2024 23:55:09 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_35344=eab920d90b58c4d19d41497fa22a88c66cdc30f4d0e9b1bdba5ed663f3b5720d; expires=Wed, 06-Dec-2023 23:55:09 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l8GOHPVFLj74ZaSwCBjM5NpaUoUc8Fi7fspsQwS%2BhGeDFzzM9LQ44ZMDv39D3NKyzr3vOS%2BNf3ANxUs%2F53ltLyl2TnJ2AgABk37vHLGkWiNAxwm392Ch1Y0YAUgeyFs7NmvwB4RU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8307fa8048a756a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17
172.67.172.49302 Found 0 B URL User Request GET HTTP/3 subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17 HTTP/1.1
Host: subscribe.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 04 Dec 2023 23:55:10 GMT
content-type: text/html; charset=UTF-8
location: https://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=cdb6bf8210fbcf4c9e068fcbf11250bb; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o9Luhsn7FUBMyHu%2BNA8EErCGh0%2BAAM0CXN7Z9b3mixLJlMcYDv42az2LN9d5J2A8fOtTqv8JFeUADduEGsMIDt6ZY5rAS%2BEU5GjSPrfrs9AFf4dFJiPhTeEEWNcVml5mOPBZg%2FJjw5a2jk4KKpRD8mal"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8307fa85788856c3-OSL
alt-svc: h3=":443"; ma=86400
www.dropbox.com/s/dl/9kywb1xfr244qtl/BidenBucks07%237.jpg
162.125.71.18302 Found 213 kB URL GET HTTP/2 www.dropbox.com/s/dl/9kywb1xfr244qtl/BidenBucks07%237.jpg
IP 162.125.71.18:443
Requested by http://subscribe.goodlifestylenews.com/?email=triedel@buenavistacompanies.com&redirect_id=32027&bid=17&ses_id=f246ffb78c4b983d4b55b1a97b7fa29a
Certificate IssuerDigiCert Inc
Subject*.dropbox.com
Fingerprint17:55:A3:E8:7A:9A:D8:FF:86:5A:8E:81:2C:30:73:6B:8A:88:10:43
ValidityTue, 31 Oct 2023 00:00:00 GMT - Sat, 30 Nov 2024 23:59:59 GMT
Size 213 kB (212787 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/dl/9kywb1xfr244qtl/BidenBucks07%237.jpg HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://subscribe.goodlifestylenews.com/
DNT: 1
Connection: keep-alive
Cookie: gvc=MTUzNzQzMjc4MzIwMTQwOTgwMTg5OTkwNjQxMDk0MTY1Mjc5NTg5; t=2-vqKX_-w1taRtbBwJrCbKI4; __Host-js_csrf=2-vqKX_-w1taRtbBwJrCbKI4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-security-policy: sandbox
location: https://ucff0ebe5701adc1dcfaa0c7533c.dl.dropboxusercontent.com/cd/0/get/CIxaaSp2NP2tereG7vLs3cu28v6pakQw-rWU88ktarP-YFw0464o_YVIIJAVKRmn9x9V-RnI0Llpe49HiwTIXRxYNwKyqBuvCMo2tujap2j2Xs4mJwAXuK2dj-6pAQpMs2Ok9xHP2EXFQwcDQul3-h-v/file?dl=1#
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=2-vqKX_-w1taRtbBwJrCbKI4; Domain=dropbox.com; expires=Thu, 03 Dec 2026 23:55:13 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=2-vqKX_-w1taRtbBwJrCbKI4; expires=Thu, 03 Dec 2026 23:55:13 GMT; Path=/; SameSite=None; Secure
__Host-ss=_BVo1cXZz8; expires=Thu, 03 Dec 2026 23:55:13 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
__Host-logged-out-session=ChDd4A8LytFU+DIYjD2zrVRQEOHNuasGGi5BSVhCQXhkRm92UHNORUk4QjhBWEZ6Y3ZxRDZhcHJPckVQdG1fcGcwX3VDQTlB; HttpOnly; Path=/; SameSite=None; Secure
locale=en; Domain=dropbox.com; expires=Sat, 02 Dec 2028 23:55:13 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
date: Mon, 04 Dec 2023 23:55:13 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 810e3202a09140c1beb00cda487e53ba
X-Firefox-Spdy: h2