GET coachingetmental.com/wp-includes/css/dist/block-library/style.min%EF%B9%96ver=5.9.3.css
404 Not Found 205 B URL GET HTTP/1.1 coachingetmental.com/wp-includes/css/dist/block-library/style.min%EF%B9%96ver=5.9.3.css
IP
Requested by http://coachingetmental.com/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 46a252303b27f68e6d214afa97e256dc
d8f0aae6450365d1e65705880b06bd5d07ecca06
b404fbfdfba03a059ed95d04955773ea2fa7868702205e5baf547d74920ae193
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/css/dist/block-library/style.min%EF%B9%96ver=5.9.3.css HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 205
Connection: keep-alive
X-Powered-By: Express
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff
GET coachingetmental.com/wp-includes/js/jquery/jquery-migrate.min%EF%B9%96ver=3.3.2.js
200 OK 11 kB URL GET HTTP/1.1 coachingetmental.com/wp-includes/js/jquery/jquery-migrate.min%EF%B9%96ver=3.3.2.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min%EF%B9%96ver=3.3.2.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 11224
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"2bd8-18c260a2783"
GET coachingetmental.com/wp-content/plugins/td-composer/td-multi-purpose/style%EF%B9%96ver=381db5cebf26144e1b1ab5f0477be694.css
200 OK 37 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/plugins/td-composer/td-multi-purpose/style%EF%B9%96ver=381db5cebf26144e1b1ab5f0477be694.css
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (37324), with no line terminators
Hash 1c5e79337c55992a03772b9bd785c165
dc62158de0b4cf95c72da5393794f4f6e6acffed
aebbf8ecf577a1fd5510844a19950eda48bd86dc274965e40bd4fafc6cf7c036
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/td-composer/td-multi-purpose/style%EF%B9%96ver=381db5cebf26144e1b1ab5f0477be694.css HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: text/css; charset=UTF-8
Content-Length: 37324
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"91cc-18c260a2764"
GET coachingetmental.com/wp-includes/js/jquery/jquery.min%EF%B9%96ver=3.6.0.js
200 OK 90 kB URL GET HTTP/1.1 coachingetmental.com/wp-includes/js/jquery/jquery.min%EF%B9%96ver=3.6.0.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (65447)
Hash 02dd5d04add4759122013c5ab4dc5cc2
a45a56e396ac549b4ff39b696ce9e0c16a7612de
bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery.min%EF%B9%96ver=3.6.0.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 89521
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"15db1-18c260a2784"
GET coachingetmental.com/
200 OK 500 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8177), with CRLF, LF line terminators
Size 500 kB (500405 bytes)
Hash 1da34105712d6f1c75351ac7f8b543dd
b8186e7206a4c12a8758cb952fa29dde5719c3dc
cf037da197a6d0123e487faa5cf9102883f6ee66b5c9dd5e4795655d7de6e4d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:16 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 500405
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:46 GMT
ETag: W/"7a2b5-18c260a1f3e"
GET coachingetmental.com/wp-content/themes/Newspaper/style%EF%B9%96ver=11.4.css
200 OK 149 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/themes/Newspaper/style%EF%B9%96ver=11.4.css
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (378)
Size 149 kB (149099 bytes)
Hash 5a5c092046037121610cf99203b49d90
6621b63f85c5e6fa56afb47b9eaae88df161b482
407f954b0f9179c6c2da7b90470bdf49acc5bc0524a89a577c6b733f7b98b551
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/Newspaper/style%EF%B9%96ver=11.4.css HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: text/css; charset=UTF-8
Content-Length: 149099
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"2466b-18c260a2768"
GET coachingetmental.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main%EF%B9%96ver=381db5cebf26144e1b1ab5f0477be694.css
200 OK 159 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main%EF%B9%96ver=381db5cebf26144e1b1ab5f0477be694.css
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (321)
Size 159 kB (159052 bytes)
Hash a093769cf1e58ef50c80ca94d6472b77
4e7565abef8a9926ccce5e7fcc55d6eae61bb8d5
da9ecdbfa9932c1381b4e24f38b99e7d8e31ff4ff62a0e5cd46a9efeda677875
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main%EF%B9%96ver=381db5cebf26144e1b1ab5f0477be694.css HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: text/css; charset=UTF-8
Content-Length: 159052
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"26d4c-18c260a2760"
GET coachingetmental.com/wp-includes/js/comment-reply.min%EF%B9%96ver=5.9.3.js
200 OK 3.0 kB URL GET HTTP/1.1 coachingetmental.com/wp-includes/js/comment-reply.min%EF%B9%96ver=5.9.3.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (2944)
Hash de4a840c13784af24cd8f5bf51d8f1dc
26b7a4e73f1ef346a894f3d91d8e0b395dc19e98
a10b9570a1c7858442b42f1cd48b69a191638269f37e4046607bf5fe188e38bf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/comment-reply.min%EF%B9%96ver=5.9.3.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2979
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"ba3-18c260a2783"
GET coachingetmental.com/wp-includes/js/underscore.min%EF%B9%96ver=1.13.1.js
200 OK 19 kB URL GET HTTP/1.1 coachingetmental.com/wp-includes/js/underscore.min%EF%B9%96ver=1.13.1.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (19034)
Hash 47e07d05e0e32338ed2e112d3f46cac1
331fa3259ce673bf92047a25542305242eb6f35f
4f6366518c3d992d6a9a3aee342675532822d6b1d66217df7b284bb450dbb99a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/underscore.min%EF%B9%96ver=1.13.1.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 19069
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"4a7d-18c260a2784"
GET coachingetmental.com/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min%EF%B9%96ver=c181d64d1d8a935f19bbe229f049bcfe.js
200 OK 5.3 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min%EF%B9%96ver=c181d64d1d8a935f19bbe229f049bcfe.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (543)
Hash 535918de7bec72049b6cc7673af5e1bd
d90eaf7b64d87a9ff78ac5ddcc3fd40dd4beaff6
1cb5dcdb11eda07425f9584041552e161f7ff7395cf52d201e023dcd869157f2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min%EF%B9%96ver=c181d64d1d8a935f19bbe229f049bcfe.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 5280
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"14a0-18c260a275f"
GET coachingetmental.com/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min%EF%B9%96ver=c181d64d1d8a935f19bbe229f049bcfe.js
200 OK 38 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min%EF%B9%96ver=c181d64d1d8a935f19bbe229f049bcfe.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (904)
Hash 2faa240c0d93ee50ae3b398aa889d0c8
2565de3dd52a3fe33be5e01aab5a730ab3d59558
5d5ee2ea990988787e3dd82b9b312600c09ce412250e63530e0e347c04b06c1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min%EF%B9%96ver=c181d64d1d8a935f19bbe229f049bcfe.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 38012
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"947c-18c260a275f"
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://coachingetmental.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 452684
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://coachingetmental.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 452480
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET coachingetmental.com/wp-content/plugins/featured-image-from-url/includes/html/js/image%EF%B9%96ver=3.9.1.js
200 OK 3.6 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/plugins/featured-image-from-url/includes/html/js/image%EF%B9%96ver=3.9.1.js
IP
Requested by http://coachingetmental.com/
Hash 9cf062cd5a2b88a0cefaf9394b8c32ea
55b71039157817aa233ef1b4410f404cfdd5b1ce
430df020a5c2325ff6283cba6d9689c87e8f6cba53094fa342a55e2c15fcb39b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/featured-image-from-url/includes/html/js/image%EF%B9%96ver=3.9.1.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 3628
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"e2c-18c260a275e"
GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://coachingetmental.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 452480
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://coachingetmental.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:54:00 GMT
expires: Wed, 04 Dec 2024 03:54:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 24498
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://coachingetmental.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 04:43:41 GMT
expires: Wed, 04 Dec 2024 04:43:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 21517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET coachingetmental.com/wp-content/uploads/2022/04/HEALTH_CARE-removebg-preview.png
200 OK 15 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/uploads/2022/04/HEALTH_CARE-removebg-preview.png
IP
Requested by http://coachingetmental.com/
File type PNG image data, 449 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash b34066c62611c5a9b4554ce3ae472cf0
414899bfb3723bcd5d136ecffeabdab1e10f68bb
6a769e61677136954758169cd5b20a6f551a08c891fb872234324e7f50b38834
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/04/HEALTH_CARE-removebg-preview.png HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: image/png
Content-Length: 14746
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"399a-18c260a2768"
GET coachingetmental.com/wp-content/themes/Newspaper/images/icons/newspaper%EF%B9%9619.woff
200 OK 25 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/themes/Newspaper/images/icons/newspaper%EF%B9%9619.woff
IP
Requested by http://coachingetmental.com/
File type Web Open Font Format, TrueType, length 24864, version 0.0\012- data
Hash b527d8ce3f034285f69b410d6ac6e58b
80c79fe969594d2f4c57027650872fdd7bba491d
ea9ad8f6ace011a694d664482cc6ca0acc2dd86a8d6b684154327ec84c0c95fd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/Newspaper/images/icons/newspaper%EF%B9%9619.woff HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/wp-content/themes/Newspaper/style%EF%B9%96ver=11.4.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/font-woff
Content-Length: 24864
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"6120-18c260a2767"
GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://coachingetmental.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 452480
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET coachingetmental.com/wp-content/uploads/2022/04/footer_bg.jpg
200 OK 108 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/uploads/2022/04/footer_bg.jpg
IP
Requested by http://coachingetmental.com/
File type JPEG image data, progressive, precision 8, 1200x531, components 3\012- data
Size 108 kB (107649 bytes)
Hash bee581b44ea2faa7487a483de388b3ce
745fb06dedd6079d855e8ed9f116ddd7c49cd597
eeced1d8cb05e0490197eca352ff09680161f09b254df3fca1acb8e98593a275
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/04/footer_bg.jpg HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:18 GMT
Content-Type: image/jpeg
Content-Length: 107649
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"1a481-18c260a277f"
GET coachingetmental.com/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min%EF%B9%96ver=11.4.js
200 OK 272 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min%EF%B9%96ver=11.4.js
IP
Requested by http://coachingetmental.com/
File type ASCII text, with very long lines (670)
Size 272 kB (271908 bytes)
Hash 5163be43754ceab97f0789b519bd8dc3
3190577f6df756c083e3b12dbfa06cd55fbc9ee1
64aa3aea4984154fa8dbe542159695fdc109c6421f7e7ee3513779404181e676
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min%EF%B9%96ver=11.4.js HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 271908
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"42624-18c260a2763"
GET cdn.shopify.com/s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276
200 OK 0 B URL GET HTTP/2 cdn.shopify.com/s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by http://coachingetmental.com/
Certificate IssuerLet's Encrypt
Subjectcdn.shopify.com
Fingerprint25:1C:74:8B:76:90:38:37:05:56:52:02:BB:8A:84:39:77:F6:A0:8A
ValidityWed, 08 Nov 2023 13:05:11 GMT - Tue, 06 Feb 2024 13:05:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 05 Dec 2023 10:42:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 05 Dec 2023 11:42:19 GMT
Location: https://cdn.shopify.com/s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R7ufEjWJzpLu%2Fy7ZtAcWoHWnbnt8C%2FYgBTu6C6MxRT3rEV55QSy3LQFgZKo6v47KLX8L1%2FdKyA5wGPl4FVp6J1ZvLytvIwuTR6LlFbVycgNCpIEgjNrZP8YilD7j3PUhYg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server-Timing: cfRequestDuration;dur=3.999949
Server: cloudflare
CF-RAY: 830bae84cef356ae-OSL
alt-svc: h3=":443"; ma=86400
GET cdn.shopify.com/s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613
301 Moved Permanently 0 B URL GET HTTP/1.1 cdn.shopify.com/s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by http://coachingetmental.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 05 Dec 2023 10:42:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 05 Dec 2023 11:42:19 GMT
Location: https://cdn.shopify.com/s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YC%2BoyAWCT8a33wLHdJSguw4TnJyX2PgRfD3SWpNRLHRTT7xTxrBWvLKkPEtwkS4DRul%2FcEkKMWGurfhsLyst%2BL1WZi5KyziqcVsbVKo2pTQPacwXoc7IRWvvIKP%2Fgft9nA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server-Timing: cfRequestDuration;dur=2.000093
Server: cloudflare
CF-RAY: 830bae84ff3856ae-OSL
alt-svc: h3=":443"; ma=86400
GET coachingetmental.com/favicon.ico
404 Not Found 150 B URL GET HTTP/1.1 coachingetmental.com/favicon.ico
IP
Requested by http://coachingetmental.com/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 84241342d84ac29592a5d9516f8edf7f
03c53980e18e17625f439c20e7d438f066202428
6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 150
Connection: keep-alive
X-Powered-By: Express
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff
GET cdn.shopify.com/s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276
200 OK 9.4 kB URL GET HTTP/2 cdn.shopify.com/s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by http://coachingetmental.com/
Certificate IssuerLet's Encrypt
Subjectcdn.shopify.com
Fingerprint25:1C:74:8B:76:90:38:37:05:56:52:02:BB:8A:84:39:77:F6:A0:8A
ValidityWed, 08 Nov 2023 13:05:11 GMT - Tue, 06 Feb 2024 13:05:10 GMT
File type ISO Media, AVIF Image\012- data
Hash 398f9977ef99e6026823e0517431fa3a
661b9e33ff220990a0951d9d44ee2eb26f24179c
7b1ca1de5bb6b56daac671e0516d941b80fabed38a729e6c02fae131f2009238
GET /s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg?v=1651232276 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://coachingetmental.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/avif
content-length: 9381
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0280/6241/6930/files/Aloevera_d4500ef5-9fa7-470f-8132-5fd7791742b8_240x240.jpg>; rel="canonical"
source-length: 320129
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: fa3e58f5-f571-45d8-b191-291a2a85a75f
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,gcp-us-central1
last-modified: Sun, 12 Nov 2023 10:49:46 GMT
cf-cache-status: HIT
age: 444083
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yOdB8kBsw3QsayPp5%2FenvEqcrRyRk3h%2FlmvrCtuGEEK4a5NrV7fPZT%2FgmqSjv%2FzNR14X13JnGdjFqcSJGOCugkfUXDuYBg2GCdaIVHB3xVR05FtWgbDIb%2BH0CxAPVf2xLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=447.563, imageryFetch;dur=58.867, imageryProcess;dur=387.982;desc="image", cfRequestDuration;dur=11.999846
server: cloudflare
cf-ray: 830bae850a35b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.shopify.com/s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613
301 Moved Permanently 40 kB URL GET HTTP/1.1 cdn.shopify.com/s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by http://coachingetmental.com/
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7043ebe14a86659dcb42c37309b553a6
8f14b4e2b9d8fb444f980f5f9930954e34b6a2a0
6f46d1a921a4e5266eb8411864f82e63be94d3c227f1df95e343a817f2313d6c
GET /s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png?v=1643056613 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://coachingetmental.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/webp
content-length: 39732
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0807/7897/articles/how-to-fix-oily-hair-sitting-pretty-halo-hair_8d93a61f-3a26-462b-aa9b-fd69bdc1b3cd_1024x1024.png>; rel="canonical"
source-length: 429114
source-type: image/png
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 223f1140-020e-4363-b41b-0d6ce58c0337
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-central1
last-modified: Tue, 07 Nov 2023 15:52:18 GMT
cf-cache-status: HIT
age: 444083
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nt5S8gTvL3Wgh66W5k3x5J2Prf5X4vbeUXPJ%2FMWb64TEsZ%2BNz9WEhtBKR9fcNl%2BzdfUjUy9qODm8vqKtrprrCtDhCEET8zLQYFOU2%2FeemZkxkIbKZ8oHarMZle%2F5gge7WA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=293.875, imageryFetch;dur=61.661, imageryProcess;dur=230.983;desc="image", cfRequestDuration;dur=11.999846
server: cloudflare
cf-ray: 830bae853a4eb4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.newbeauty.com/wp-content/uploads/2022/04/Sheryl_Apr2022_0065-copy-scaled.jpg
200 OK 318 kB URL GET HTTP/2 www.newbeauty.com/wp-content/uploads/2022/04/Sheryl_Apr2022_0065-copy-scaled.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint48:51:56:D1:F0:63:77:A2:46:D8:4A:E2:4C:71:E6:48:18:FD:1B:BA
ValidityFri, 10 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1707, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 318 kB (317992 bytes)
Hash 6d56a64d170c58c45d7ae3b5979ada9c
d90f0222bbfb76ad35def71fb1296522191661f3
28a2837ad895e096edeb7dc0a7efb707ee446e7257b1794a56d4e67e9c35b9a3
GET /wp-content/uploads/2022/04/Sheryl_Apr2022_0065-copy-scaled.jpg HTTP/1.1
Host: www.newbeauty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/webp
content-length: 317992
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=530625
content-disposition: inline; filename="Sheryl_Apr2022_0065-copy-scaled.webp"
vary: Accept
etag: "c2608e18850f2355669b9c96f69fe596"
expires: Wed, 03 Jan 2024 23:29:31 GMT
last-modified: Tue, 10 May 2022 07:10:48 GMT
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 40368
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xeVCKkGgH6K3EoAholQlv0ie8DJY8E0SsMS37tkqOKog0BCqyJ0PRYQU8ZY7ECOcs6JrFuSI35cLFZkD78RrsxChraZ66BdxFXgkd6nONKscTVxxnir0hgvUfqaXGQDsznQe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830bae853f9f5689-OSL
X-Firefox-Spdy: h2
GET coachingetmental.com/page/2/index.html
200 OK 207 kB URL GET HTTP/1.1 coachingetmental.com/page/2/index.html
IP
Requested by http://coachingetmental.com/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8177), with CRLF, LF line terminators
Size 207 kB (207046 bytes)
Hash 6fa2b2660c1c5e75774913c3e8ff8343
6288aae94287a052edbdf9d8458dfa084766b3ff
b22f94d3c3afaa6a894c4cd3a9472fb24d25e972b8b92fc2ee7796de9659be1b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /page/2/index.html HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:18 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 207046
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:47 GMT
ETag: W/"328c6-18c260a220e"
GET img.webmd.com/dtmcms/live/webmd/consumer_assets/site_images/article_thumbnails/video/countdown_how_to_whiten_your_teeth_video/1800x1200_countdown_how_to_whiten_your_teeth_video.jpg
200 OK 77 kB URL GET HTTP/2 img.webmd.com/dtmcms/live/webmd/consumer_assets/site_images/article_thumbnails/video/countdown_how_to_whiten_your_teeth_video/1800x1200_countdown_how_to_whiten_your_teeth_video.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerCloudflare, Inc.
Subjectimg.webmd.com
FingerprintE2:DA:9D:66:E0:F7:A9:9D:80:DC:82:91:11:36:36:64:A7:D0:5F:DC
ValidityTue, 14 Mar 2023 00:00:00 GMT - Wed, 13 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3e69bfa49adc3287d30e5e72ecf25d74
55c4df5e0f30a6a15a67842d4a6c65bd686f2b8c
5747b3d1ec475e916f602256af1342ffe041ca4a920c23070176a20bd89a36c3
GET /dtmcms/live/webmd/consumer_assets/site_images/article_thumbnails/video/countdown_how_to_whiten_your_teeth_video/1800x1200_countdown_how_to_whiten_your_teeth_video.jpg HTTP/1.1
Host: img.webmd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/webp
content-length: 77442
cache-control: public, max-age=86400
etag: W/"12e82-18637969b50"
last-modified: Thu, 09 Feb 2023 19:11:02 GMT
x-compressed-by: webmd
x-powered-by: Express
x-robots-tag: noindex
x-datacenter: MA1
cf-cache-status: HIT
age: 40369
expires: Wed, 06 Dec 2023 10:42:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bae8658825689-OSL
X-Firefox-Spdy: h2
GET www.sunriseseniorliving.com/~/media/blog-images/march-2022/personalized-dining-experience.png
301 Moved Permanently 224 B URL GET HTTP/1.1 www.sunriseseniorliving.com/~/media/blog-images/march-2022/personalized-dining-experience.png
IP
Requested by http://coachingetmental.com/
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 52a8a908b24d433d4b142d7a5d10e260
f79a0888c503e72cd20561b33288ab26365ef7e5
ef72b20df6e9605211f593ebb7ace7343a9da32827decdecc4fa6c09604d9aee
GET /~/media/blog-images/march-2022/personalized-dining-experience.png HTTP/1.1
Host: www.sunriseseniorliving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 05 Dec 2023 10:42:19 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.sunriseseniorliving.com/~/media/blog-images/march-2022/personalized-dining-experience.png
Cache-Control: max-age=86400
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830bae84fe7856aa-OSL
GET kalynskitchen.com/wp-content/uploads/2013/04/1-650-crop-lentil-taco-salad.jpg
200 OK 125 kB URL GET HTTP/2 kalynskitchen.com/wp-content/uploads/2013/04/1-650-crop-lentil-taco-salad.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint98:2E:1E:73:EF:57:72:EE:2B:B3:D2:AD:15:8F:CC:FD:4D:A5:A4:0C
ValidityThu, 26 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 650x878, components 3\012- data
Size 125 kB (124771 bytes)
Hash fd22d8d6af1925286a62825dfed09de5
8e431ad3b58e85fb9307f9f6547634fb5befd47f
94b723061fae1950a142e9dd1156fcb83485da335fd398b24b2b884f792980a7
GET /wp-content/uploads/2013/04/1-650-crop-lentil-taco-salad.jpg HTTP/1.1
Host: kalynskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/jpeg
content-length: 124771
cache-control: public, max-age=604800
expires: Sat, 09 Dec 2023 14:43:10 GMT
last-modified: Fri, 07 Aug 2020 14:52:11 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cross-origin-opener-policy: same-origin
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 230709
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zhSpz9CUC5CNEFgm8tCtaGHxNwD9Dor9i646oK2iFMioqOe32cXa%2FQZkHd8vqWhAwfLDJZo6%2FYU1CTEF369MP%2B8bJOryQA84jJQTchhmmjqHjhU6dwpCgHZO%2FaMwE4Eyk7vFHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bae866e2a7128-OSL
X-Firefox-Spdy: h2
GET elanaspantry.com/wp-content/uploads/2007/02/Ginger-Licorice-Tea-5823.jpg
200 OK 29 kB URL GET HTTP/2 elanaspantry.com/wp-content/uploads/2007/02/Ginger-Licorice-Tea-5823.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerCloudflare, Inc.
Subjectelanaspantry.com
Fingerprint65:93:23:10:E4:FB:17:9F:F3:48:CD:79:6D:D4:4B:50:53:80:B5:CD
ValidityThu, 25 May 2023 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 680x540, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7c810551a31f484bf92c7d217212f506
8656e2bc94dc88a9c310a938f8724fcae2658482
f9982389039bea7e37b8a2db364f3b3099bb49f18a753222bf04c6c0a6566a6f
GET /wp-content/uploads/2007/02/Ginger-Licorice-Tea-5823.jpg HTTP/1.1
Host: elanaspantry.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/webp
content-length: 28844
cache-control: public, must-revalidate, proxy-revalidate, immutable, max-age=31536000, stale-while-revalidate=86400, stale-if-error=604800
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=37326
content-disposition: inline; filename="Ginger-Licorice-Tea-5823.webp"
access-control-allow-origin: *
etag: "62ab58a5-91ce"
last-modified: Thu, 16 Jun 2022 16:21:57 GMT
vary: Accept
x-hosted-by: BigScoots
x-powered-by: centminmod
cf-cache-status: HIT
age: 40369
accept-ranges: bytes
content-security-policy: block-all-mixed-content
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-np-cfe: dns1
server: cloudflare
cf-ray: 830bae869c8b0b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET images.101cookbooks.com/DIP-PEACE-LOVE-h.jpg?w=680
200 OK 132 kB URL GET HTTP/2 images.101cookbooks.com/DIP-PEACE-LOVE-h.jpg?w=680
IP
Requested by http://coachingetmental.com/
Certificate IssuerCertainly
Subjectimages-production.catchandrelease.com
Fingerprint5B:4B:6B:2B:F3:98:AB:30:30:F9:A5:54:EC:EC:40:92:F0:65:56:2C
ValidityWed, 29 Nov 2023 22:03:16 GMT - Fri, 29 Dec 2023 22:03:15 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 680x510, components 3\012- data
Size 132 kB (131572 bytes)
Hash 1a05797771c5ae0f46dbe793ea671c0f
1fe7a91031c8680dac5f2044d76d89a6a2901b21
37f85f44e4527f69150bf68be9382a91aee085de079227a51470bca8e8e6a0af
GET /DIP-PEACE-LOVE-h.jpg?w=680 HTTP/1.1
Host: images.101cookbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 17:00:18 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: b6560be3146a76e8f21fd463ff5739af7614e0f0
x-imgix-render-farm: 01.140328
date: Tue, 05 Dec 2023 10:42:19 GMT
age: 150121
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10032-SJC, cache-hel1410033-HEL
x-cache: HIT, HIT
content-length: 131572
X-Firefox-Spdy: h2
GET img.webmd.com/dtmcms/live/webmd/consumer_assets/site_images/article_thumbnails/news/2021/04_2021/menthol_cigarettes/1800x1200_menthol_cigarettes.jpg
200 OK 146 kB URL GET HTTP/2 img.webmd.com/dtmcms/live/webmd/consumer_assets/site_images/article_thumbnails/news/2021/04_2021/menthol_cigarettes/1800x1200_menthol_cigarettes.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerCloudflare, Inc.
Subjectimg.webmd.com
FingerprintE2:DA:9D:66:E0:F7:A9:9D:80:DC:82:91:11:36:36:64:A7:D0:5F:DC
ValidityTue, 14 Mar 2023 00:00:00 GMT - Wed, 13 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 146 kB (146544 bytes)
Hash c21d187dd06b2b9b717e1178912db5cd
0e4c2b972e00a17f9a39628391d32b6325358a22
d3e2bf3657a416706ce4729ead121e9ea2e881d542af49e64f8763914b9cd26e
GET /dtmcms/live/webmd/consumer_assets/site_images/article_thumbnails/news/2021/04_2021/menthol_cigarettes/1800x1200_menthol_cigarettes.jpg HTTP/1.1
Host: img.webmd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/webp
content-length: 146544
cache-control: public, max-age=86400
etag: W/"23c70-186388c2f54"
last-modified: Thu, 09 Feb 2023 23:39:16 GMT
x-compressed-by: webmd
x-powered-by: Express
x-robots-tag: noindex
x-datacenter: MA1
cf-cache-status: HIT
age: 40369
expires: Wed, 06 Dec 2023 10:42:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bae87c9de5689-OSL
X-Firefox-Spdy: h2
GET www.ambitiouskitchen.com/wp-content/uploads/2021/03/Healthy-4-Ingredient-Reeses-Eggs-7long.jpg
200 OK 72 kB URL GET HTTP/2 www.ambitiouskitchen.com/wp-content/uploads/2021/03/Healthy-4-Ingredient-Reeses-Eggs-7long.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerCloudflare, Inc.
Subjectwww.ambitiouskitchen.com
FingerprintBD:C5:96:F0:45:F5:DB:26:D8:66:51:9F:09:AC:3A:B7:63:65:B1:74
ValiditySun, 22 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1067x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0a3625eb200382b2c3af52a2f362dbd3
5e955fe7cecb3f2ba0da73d7bf96f75318820c0f
2b1fb68ae458a01042f103a700b1df571c1ece41223a79dba80a42ea7e423183
GET /wp-content/uploads/2021/03/Healthy-4-Ingredient-Reeses-Eggs-7long.jpg HTTP/1.1
Host: www.ambitiouskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: image/webp
content-length: 72074
cache-control: public, must-revalidate, proxy-revalidate, immutable, max-age=31536000, stale-while-revalidate=86400, stale-if-error=604800
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=167809
content-disposition: inline; filename="Healthy-4-Ingredient-Reeses-Eggs-7long.webp"
access-control-allow-origin: *
etag: "654d2ebb-28f81"
last-modified: Thu, 09 Nov 2023 19:10:51 GMT
vary: Accept
x-hosted-by: BigScoots
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cf_bm=XcsjQmfyt6XQiCyoSHRSB1wYsbqVO82koyYRQ2T2jUc-1701772939-0-AeFyYpoInDurcnF8FznP/tvweEA9KQ+3AkdT8OuTlmQDbcisJfz7HaoFg6y9T7tVjQxuGyAPH0fxW4GvG5jhc3o=; path=/; expires=Tue, 05-Dec-23 11:12:19 GMT; domain=.www.ambitiouskitchen.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
x-bigscoots-cache-status: HIT
server: cloudflare
cf-ray: 830bae86edf8568f-OSL
X-Firefox-Spdy: h2
GET www.healthcare.gov/images/logo.png
200 OK 2.3 kB URL GET HTTP/2 www.healthcare.gov/images/logo.png
IP
Requested by http://coachingetmental.com/
Certificate IssuerDigiCert Inc
Subjectwww.healthcare.gov
Fingerprint29:13:73:53:43:56:C1:F9:88:73:B9:BE:6A:F3:1D:AB:0D:2B:74:A2
ValidityWed, 25 Jan 2023 00:00:00 GMT - Wed, 24 Jan 2024 23:59:59 GMT
File type PNG image data, 241 x 30, 8-bit colormap, non-interlaced\012- data
Hash dcab6b0bb2b81370a08e34b2925b5786
7b5374be161e7dc45da974d8aa8e475b26157a25
0fa6608097f9162b3efbe478cae2a88aea6498e5f1b7ddf6c4f882e16dd0eac3
GET /images/logo.png HTTP/1.1
Host: www.healthcare.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
etag: "dcab6b0bb2b81370a08e34b2925b5786:1502399915"
last-modified: Thu, 10 Aug 2017 20:08:38 GMT
content-length: 2329
date: Tue, 05 Dec 2023 10:42:19 GMT
set-cookie: optimizelyEndUserId=255a0317292f02008bfe6e652d0300008c160000; expires=Thu, 04-Dec-2025 10:42:19 GMT; path=/; domain=.healthcare.gov; secure
_ga=GA1.2.1701003368.1701772939; expires=Thu, 04-Dec-2025 10:42:19 GMT; path=/; domain=.healthcare.gov; secure
akavpau_vp1=1701773239~id=6c4f79ebf4bb57754a5295f22020d7f8; Path=/; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; preload
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
GET storage.googleapis.com/blogs-images/ciscoblogs/1/2022/04/Mitigating-new-Industroyer2-and-Incontroller-malware600x200px.jpg
200 OK 22 kB URL GET HTTP/2 storage.googleapis.com/blogs-images/ciscoblogs/1/2022/04/Mitigating-new-Industroyer2-and-Incontroller-malware600x200px.jpg
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.googleapis.com
Fingerprint4D:66:EA:1A:AB:86:BB:C2:E9:29:62:76:DE:45:0D:60:53:70:6F:1F
ValidityMon, 23 Oct 2023 11:28:29 GMT - Mon, 15 Jan 2024 11:28:28 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, comment: "LEADTOOLS v20.0", baseline, precision 8, 600x200, components 3\012- data
Hash e6c26d0bf0c8013a8c0b4099dd58d93f
8cf23275244325509e0669dde632988cda0aeef9
d9659230b4c59108548c0b54b96253ef8c299a31a8678f642c17b2dcb3119c6f
GET /blogs-images/ciscoblogs/1/2022/04/Mitigating-new-Industroyer2-and-Incontroller-malware600x200px.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPqOKx-7s2daWekHEIP77JVeSXThdHNuocGwNqN3plewH5X2ujG6T3PMzW8cvFc8ICpDJ4fkkYHI3Q
x-goog-generation: 1651098629073092
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 22150
x-goog-hash: crc32c=vps41A==, md5=5sJtC/DIATqMC0CZ3VjZPw==
x-goog-storage-class: NEARLINE
accept-ranges: bytes
content-length: 22150
server: UploadServer
date: Tue, 05 Dec 2023 10:42:20 GMT
expires: Tue, 05 Dec 2023 11:42:20 GMT
cache-control: public, max-age=3600
last-modified: Wed, 27 Apr 2022 22:30:29 GMT
etag: "e6c26d0bf0c8013a8c0b4099dd58d93f"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET storage.googleapis.com/blogs-images/ciscoblogs/1/2022/04/Learning-Blog-featured-image_ChatOps-1024x531.png
200 OK 706 kB URL GET HTTP/2 storage.googleapis.com/blogs-images/ciscoblogs/1/2022/04/Learning-Blog-featured-image_ChatOps-1024x531.png
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.googleapis.com
Fingerprint4D:66:EA:1A:AB:86:BB:C2:E9:29:62:76:DE:45:0D:60:53:70:6F:1F
ValidityMon, 23 Oct 2023 11:28:29 GMT - Mon, 15 Jan 2024 11:28:28 GMT
File type PNG image data, 1024 x 531, 8-bit/color RGBA, non-interlaced\012- data
Size 706 kB (706455 bytes)
Hash 0ad78ffdb24e6aaeae18f6bb1e513fae
346abc85f184c2765ebe6cf65a206f108846990c
12f6253b9a53d65d6342d84edb00b90cafaa074db90f92712fcdfc55a90cd261
GET /blogs-images/ciscoblogs/1/2022/04/Learning-Blog-featured-image_ChatOps-1024x531.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPoNr8RolIU2cLPaTpUs-oBOlnMXjlmxc7fZZNFKljmid6faISmfsQo8ZTd1-hkcRFUAB7CEPi77Yw
x-goog-generation: 1651168693994187
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 706455
x-goog-hash: crc32c=8gpM2A==, md5=CteP/bJOaq6uGPa7HlE/rg==
x-goog-storage-class: NEARLINE
accept-ranges: bytes
content-length: 706455
server: UploadServer
date: Tue, 05 Dec 2023 10:42:20 GMT
expires: Tue, 05 Dec 2023 11:42:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 28 Apr 2022 17:58:14 GMT
etag: "0ad78ffdb24e6aaeae18f6bb1e513fae"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.sunriseseniorliving.com/~/media/blog-images/march-2022/personalized-dining-experience.png
301 Moved Permanently 224 B URL GET HTTP/1.1 www.sunriseseniorliving.com/~/media/blog-images/march-2022/personalized-dining-experience.png
IP
Requested by http://coachingetmental.com/
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 52a8a908b24d433d4b142d7a5d10e260
f79a0888c503e72cd20561b33288ab26365ef7e5
ef72b20df6e9605211f593ebb7ace7343a9da32827decdecc4fa6c09604d9aee
GET /~/media/blog-images/march-2022/personalized-dining-experience.png HTTP/1.1
Host: www.sunriseseniorliving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 05 Dec 2023 10:42:22 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.sunriseseniorliving.com/~/media/blog-images/march-2022/personalized-dining-experience.png
Cache-Control: max-age=86400
CF-Cache-Status: HIT
Age: 3
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830bae9789ab56aa-OSL
GET coachingetmental.com/wp-content/uploads/2022/04/mobile-bg.jpg.html
200 OK 61 kB URL GET HTTP/1.1 coachingetmental.com/wp-content/uploads/2022/04/mobile-bg.jpg.html
IP
Requested by http://coachingetmental.com/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8177), with CRLF, LF line terminators
Hash bc3f7bf30e3b107447c60974c4a06992
1ee511218806adab298d2759da79376e3d8bf7ee
99f4b653b3c203b2f4a97e83784035f255f56d800ac179c0020fed3fe8e3ee27
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/04/mobile-bg.jpg.html HTTP/1.1
Host: coachingetmental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 05 Dec 2023 10:42:17 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 180136
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Fri, 01 Dec 2023 15:40:48 GMT
ETag: W/"2bfa8-18c260a2782"
GET bighealthcare360.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.3
0 B URL GET bighealthcare360.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.3
IP
Requested by http://coachingetmental.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.3 HTTP/1.1
Host: bighealthcare360.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET www.sunriseseniorliving.com/sitecore/service/notfound.aspx
404 Not Found 0 B URL GET HTTP/2 www.sunriseseniorliving.com/sitecore/service/notfound.aspx
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoDaddy.com, Inc.
Subjectwww.sunriseseniorliving.com
FingerprintC8:77:03:84:BC:71:07:9C:78:7A:F9:F0:7F:69:B9:03:A4:6F:94:9E
ValidityTue, 28 Nov 2023 18:57:59 GMT - Thu, 07 Nov 2024 15:00:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sitecore/service/notfound.aspx HTTP/1.1
Host: www.sunriseseniorliving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://coachingetmental.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 05 Dec 2023 10:42:19 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
expires: -1
pragma: no-cache
set-cookie: shell#lang=en; path=/; secure; SameSite=None
x-frame-options: SAMEORIGIN
request-context: appId=cid-v1:e3044e10-3840-4a8d-a8f2-c1ca679ae139
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.sitecore.net; img-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; upgrade-insecure-requests; block-all-mixed-content; child-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/; connect-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/; media-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/;
cf-cache-status: BYPASS
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bae89182cb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET www.sunriseseniorliving.com/sitecore/service/notfound.aspx
404 Not Found 0 B URL GET HTTP/2 www.sunriseseniorliving.com/sitecore/service/notfound.aspx
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoDaddy.com, Inc.
Subjectwww.sunriseseniorliving.com
FingerprintC8:77:03:84:BC:71:07:9C:78:7A:F9:F0:7F:69:B9:03:A4:6F:94:9E
ValidityTue, 28 Nov 2023 18:57:59 GMT - Thu, 07 Nov 2024 15:00:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sitecore/service/notfound.aspx HTTP/1.1
Host: www.sunriseseniorliving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://coachingetmental.com/
DNT: 1
Connection: keep-alive
Cookie: shell#lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 05 Dec 2023 10:42:22 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=86400
expires: -1
pragma: no-cache
x-frame-options: SAMEORIGIN
request-context: appId=cid-v1:e3044e10-3840-4a8d-a8f2-c1ca679ae139
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.sitecore.net; img-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; upgrade-insecure-requests; block-all-mixed-content; child-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/; connect-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/; media-src 'self' data https://mss-p-045.sitecorecontenthub.cloud/ https://mss-p-045-delivery.stylelabs.cloud/ https://mss-p-045.sitecorecontenthub.cloud:8986/;
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bae988e7fb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%2C300%7CRoboto%3A400%2C500%2C700%2C300&display=swap&ver=11.4
200 OK 21 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%2C300%7CRoboto%3A400%2C500%2C700%2C300&display=swap&ver=11.4
IP
Requested by http://coachingetmental.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 4e7db092c64cea0b7eacfc69443246ee
e54641954979e68b0d401f711f8ce3aae20349c7
cea644050f1a2978a6f5c44148a956d568303b6dd8f89fb71b1535e9163a0a02
GET /css?family=Open+Sans%3A400%2C600%2C700%2C300%7CRoboto%3A400%2C500%2C700%2C300&display=swap&ver=11.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://coachingetmental.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 10:42:17 GMT
date: Tue, 05 Dec 2023 10:42:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
23.236.69.11
0.0.0.0
151.101.246.208
23.227.60.200
188.114.96.1
23.54.12.115