firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 17 Oct 2022 03:51:04 GMT
Expires: Mon, 17 Oct 2022 04:50:01 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZxwvJH32fdCjqaW2A-xkTFsxG7FaUe4pEJ55ROeZ8UsUasNzeAWb0w==
Age: 647
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10ab470535c002d333b4f27d38b51091
ed3b0850c5d75881de410f7e8ca35e012e38bd38
31d6655d048ec8a62e00125766fea65cde04beae0b11f12ce7f722c9a5f7e232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31D6655D048EC8A62E00125766FEA65CDE04BEAE0B11F12CE7F722C9A5F7E232"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7029
Expires: Mon, 17 Oct 2022 05:59:00 GMT
Date: Mon, 17 Oct 2022 04:01:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57d0f62d9bd29668b94a513fa45d18e
d7cb263502e21f9235b4523a596e2138d22042ec
df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20670
Expires: Mon, 17 Oct 2022 09:46:21 GMT
Date: Mon, 17 Oct 2022 04:01:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DKdISqE142rwESPXoAqEyq6khtX6IPTlJFzGtJnxZs6S61qDez+1IlNQBG1VxsGgqKK+M2DzVP0=
x-amz-request-id: EKHGKQA0PHCBAM5S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 17 Oct 2022 03:03:16 GMT
age: 3515
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ebd492c9be889ef6b53c01d4cac0eea2
b52a82e5aae1ac0b48774cfd6ecb8cf65e663f3b
a2ffbccba910cf762129ee38bb3326da3730d21e53a3f10241437874bfe994de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2FFBCCBA910CF762129EE38BB3326DA3730D21E53A3F10241437874BFE994DE"
Last-Modified: Sat, 15 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20808
Expires: Mon, 17 Oct 2022 09:48:39 GMT
Date: Mon, 17 Oct 2022 04:01:51 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 17 Oct 2022 04:01:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 17 Oct 2022 03:07:43 GMT
Expires: Mon, 17 Oct 2022 03:26:28 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9Oo52drUzMp2ihG62UhUL4os-QiH8wrzsJppPGhb_k9eCm3eGFUDrw==
Age: 3248
optimizedhealthplans.com/odel/euaapdruqnadeii
301 Moved Permanently 0 B URL HTTP/2 optimizedhealthplans.com/odel/euaapdruqnadeii
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /odel/euaapdruqnadeii HTTP/1.1
Host: optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
expires: Mon, 17 Oct 2022 05:01:51 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
location: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
content-length: 0
content-type: text/html; charset=UTF-8
date: Mon, 17 Oct 2022 04:01:51 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cfc92c8f6ee7599505d969732542ac42
7f4804d49c8ccd76ccffa6b72d41b1df611eb090
406c057a8392b9fa0ab09efa8b3222a58ec5fc17fa73f55a1f093e3d1092b0e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5386
Cache-Control: max-age=106481
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:52 GMT
Etag: "634bbb97-1d7"
Expires: Tue, 18 Oct 2022 09:36:33 GMT
Last-Modified: Sun, 16 Oct 2022 08:06:47 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4/K6biC49rGTOEIeMYA6Sg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9YRJF+XT915DjuSdSr6mssnoAqM=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 605901c6e42550516f2f8f55bdb77e58
d766e9a80c7c8b461f5e68fc383ca892c1e23307
39c2931465cffbe0f394c2dd1bed1833da893915af6c0dcb5a63939369909cf5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0efa623bed47d42f69be9e523e7725f4
b301c00ee9ab5778b326edea3bc274f8ae46da15
c7d4afc16dd19b5216a9c34cf3048b4e6dff056608666d6d40c9f5eeeae309a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-70950164-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-70950164-1
IP
File type ASCII text, with very long lines (1962)
Hash af99ad541a568939c33e2807ebdb5090
9664f0304f7b13b8b36cb756c9dcc5e7330864da
937467e3d6e4ac3700b782cf91f07e354d68666bf8bb81ca08726c82225f5598
GET /gtag/js?id=UA-70950164-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 17 Oct 2022 04:01:52 GMT
expires: Mon, 17 Oct 2022 04:01:52 GMT
cache-control: private, max-age=900
last-modified: Mon, 17 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42416
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.optimizedhealthplans.com/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.0.2
200 OK 124 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF, CR line terminators
Hash 893dd4d34591cb544851b5a41747cdfd
e8585a3187cfaa2288f0cb48e5696929306b7615
1de5e3983dd9d63c6d92bc1543a4ae8978b38fbaa8d79fbbc2035c62a68cd7cf
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.0.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:20:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 124
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
200 OK 2.3 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6051), with no line terminators
Hash c0a774e614f840a7f380a9aa68f16ac3
d42d9e9c586feba86b3accaf869ca2a365469b54
294b8486de91d8403977d27d636c158fe64ed0c93ce11902ed2f2b10f31d113f
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/hello-elementor/style.min.css?ver=2.6.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:24:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2332
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fbacb75040eb8a8678cf11f10b8cfa2f
26c77b34d23f80371b04f728d8570f19c78523ce
43d4052f98d987ecb85f487fa9e908ea80cf81f98c1d0338b6f46e65b7b5334a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.optimizedhealthplans.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 17 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
200 OK 3.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15672), with no line terminators
Hash 607799bfa5d48117a95cd9dda8a17c2b
9a969f06c70600b753b160db19a5d37c9d249d10
78f67e192604e0dca624c2dcc8ea7cd6c54e14fe15918e7c9586ec1a22775876
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:24:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3725
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/wpforms/assets/css/wpforms-full.min.css?ver=1.7.4.2
200 OK 7.8 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/wpforms/assets/css/wpforms-full.min.css?ver=1.7.4.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (39912)
Hash a10142190b2c7372b583472b98056816
ea6ba5f7ea57fceb8de05c4455a5ad42b3357d52
44a40d14b74ccdd9fb2d93d62b63009c5e8273352e81b6d55a71937df9ce16ce
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/wpforms/assets/css/wpforms-full.min.css?ver=1.7.4.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 May 2022 19:55:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7755
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/post-7782.css?ver=1662022458
200 OK 688 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/post-7782.css?ver=1662022458
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2598), with no line terminators
Hash 4ab371c014e7359e0f288df9600cdc72
043bcddf20931b18c36fe47500251909b7b23175
0200ec7ca99dee38c13cbea805c8a623a827ed95f43057c01831efd8ca77cf5c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-7782.css?ver=1662022458 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 688
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=1662022463
200 OK 1.9 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=1662022463
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11487), with no line terminators
Hash b4f6a7df9c38ad0b975b2221e39a9eba
6264c454a2d05dd0a39bc644d5bae1ccc6e1d857
1a1e3210d63cbc0648de8ed2d5835351ee1ebc36281380d675a3c9d44d44ad83
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=1662022463 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1851
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
200 OK 4.0 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19233)
Hash 2701214b028ad24fa347df8335b36d12
156bc8a7ad2657f00881890637f07c6052636499
9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4008
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 309 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 309
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/post-7820.css?ver=1664336890
200 OK 1.8 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/post-7820.css?ver=1664336890
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4025)
Hash f7f1b514a8e57f7c24cce9b39d6950b1
a2f21b9fa9184e9e0e3d57953bc98630744cbba8
60eec1d8c3a3d8fad617ed847c77c375fec23f75af75c42a0ce4284ff965b5c6
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-7820.css?ver=1664336890 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Sep 2022 03:48:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1778
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
200 OK 308 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.5
200 OK 2.5 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5141)
Hash ca104fa1d73653188a2b5fa43006e74d
7ed04628cb95a6e691d6a01b05e8aee31334a571
1aefbbf136d8d8e1a8e917a4b654a0aa49cd4dd2297148849346a31c74565c36
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.5 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2451
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 13 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-contact-form-7-tracker.js?ver=1.16.1
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-contact-form-7-tracker.js?ver=1.16.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-contact-form-7-tracker.js?ver=1.16.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.4
200 OK 4.4 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26516)
Hash fdd462f58aee3f9349eabdefb5ca0b57
bb6e017d5537630516ccb98952593690a8c69864
ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.4 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.5.3
200 OK 782 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 3c384e360ca72a2f977ffb87edff8629
bd4a6dcc918940ddc2f0871d9a15ce9763830697
14ee6b597be457d8a8837a2769d0940c9e776df50c39ebbba1b1346a80c42ffb
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css?ver=1.5.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:20:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 782
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4
200 OK 2.3 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4918)
Hash ade58b4bc50a3603c7ef8c00e94a3c94
b3447ed5f0a8e66b73e0252bdcaa3e858c88686e
b8f350a014ec37cf6d952761896b4bd3ee0527212abd1cb1400b56be50095cfb
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2313
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js?ver=1.5.3
200 OK 1.9 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js?ver=1.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 6e5f89bd8a4df07524ba6c6239a56e0c
b861d11b9897ea05a206eb3481b82dd3f885de20
95438bfd71801aadd66418a017d427b8357559c622758d8d39b3bf1d5ebaa09a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js?ver=1.5.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:20:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1910
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6475), with no line terminators
Hash 45bd1d6f7fc3a4069fc6fd400b90c961
903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2675
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
200 OK 4.2 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash a72df5f7a597c541e18a33abef3c11f5
9500913a0a3fca9979a0aed9cb745926d9f86f83
258da631753c1d8d88fb1316024b671fa4a9ac87c9d6c4f38a45bc2c3bf9f3fc
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4234
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1662022463
200 OK 1.6 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1662022463
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11736), with no line terminators
Hash 7d4adcee659b07da0b6e37eaecf5e692
41bc8b41587940fbdeee990b3bc3c18a4f26c264
5e62d53808d1481f11fb4e3ad9c763dc714dd236144bd9a0dd7b255c56105491
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1662022463 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1621
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1662022463
200 OK 4.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1662022463
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (29357), with no line terminators
Hash 0242d3ddb26686c9cae48aaa44fe104d
ce63d738d7b51a6c8d63083652c495eb29d3c30c
375a6c71583b14fc3d274e7511e2add76547b40cd99e3649caa9e347bfaf0631
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1662022463 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4680
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 8.3 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash e49f0561a452c9d04fb7d1510a23cc8c
9e8fc2e3129da4fe2790eee565a6478b864bea83
ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8254
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.5
200 OK 7.6 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (21374)
Hash a1b233033c5f15a6f045c9d38048e70e
f1e8cb9239e9c6945c6a1c315e4ee074ac0dd8a7
33e8c42fd06cb2b5e13688450fbe871cef4b447599acb91e5ce5f2565c84a499
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.5 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7576
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/odel/euaapdruqnadeii
404 Not Found 30 kB URL HTTP/2 www.optimizedhealthplans.com/odel/euaapdruqnadeii
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash cb8945ef534ac2aaa1a3f440cf2f8ce3
c3b844f1eb0227a0b72a095e823caded7a8c91ab
6d1edc7cf305b9ce7b3349f23419bf6eb7da63af6734d0e6e56b5d91b9f35255
Analyzer Verdict Alert quad9 Sinkholed
GET /odel/euaapdruqnadeii HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.optimizedhealthplans.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4
200 OK 13 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (32889)
Hash c764cb7a1a15ff10f87d4cffd828a1c2
f560e7d0873dbdf4df607ecd76232832689a7de4
72e40d8a22973f601fb4e89e9fa3ede7eb3ef6156fd0a8ea96d90b8d4a44fa6d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13281
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.4
200 OK 13 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash e6b67e11736ae36a062b381717f2ea9f
a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.4 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js?ver=1.7.4.2
200 OK 374 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js?ver=1.7.4.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (754), with no line terminators
Hash ef785f463505633971eae5c08ad626d4
624e22257f386801822229db3a4bbd2e24b25e2f
b2a0dc77f0f79d81698a7e3893e16ecba7b0d980b80a5233656d9b11f1d8160d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/wpforms/assets/js/integrations/elementor/frontend.min.js?ver=1.7.4.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 May 2022 19:55:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 374
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
200 OK 1.0 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3164), with no line terminators
Hash b61faf78df8ff0e5446c7fe2b070b144
d98140a3225bbade0a77d7d6001e65148a7ec6b8
3bb0086b96f0d58dc01f13c3d0055c3fe41a4e79e2d1461641ada355763c77c2
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:24:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1048
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/wp-util.min.js?ver=6.0.2
200 OK 709 B URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/wp-util.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1305)
Hash e9edb7bac979409cf7dbc48d7ab8aca7
ed3f941a8fe41e3994a3ca5e620219328628f532
2a0742cad9937c742b2f51c1ea2ae48359ce8d88d8b56f6d8910c0a267d631b5
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/wp-util.min.js?ver=6.0.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 709
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
200 OK 1.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4875)
Hash 6a452794a68bc140a53b30519b94edf6
68046f5611ba3cf5da1c46087609aff18f59fdc1
259990a9e6191a72a51ac9d038d0c52bb56d880a2b0d460b1fca3f3fee7961ed
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1712
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1
200 OK 2.0 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash dbdb77c63dd28a8dd9f8f019d9ad54d1
dd3bea5b04778940916181f924389a5e7ab14c04
e4d9f90a96396cb47de0c8945d70a7c50b2bb0befed3f6016cd443712a3cf7fb
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:20:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1987
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.4
200 OK 4.4 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14869)
Hash 7bab7ad64ffbd7846dd6819250b93e2e
c924918d540389aff62220088b6761f38a5da272
045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.4 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4359
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/underscore.min.js?ver=1.13.3
200 OK 8.3 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/underscore.min.js?ver=1.13.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18876)
Hash 61a4a3c276f704185a925bfa0f4d8b1b
0176eb701bb114d9cb170193f6208ec4fbb35f71
f0875cbb46e9eeb5e497dd52d8c33725509228193c2dbe9ab464f62a15c2f0e2
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8313
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/post-7836.css?ver=1664336953
200 OK 981 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/post-7836.css?ver=1664336953
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5512), with no line terminators
Hash 5b792f82fa80e147838cca2e66f7a582
c993ace1245fab61e311eb5f03c6d00253503aa7
08851c16ac2aa40f4a26ee8e85dedfbfef25cb1df083081033aaddce483a2e7c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-7836.css?ver=1664336953 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Sep 2022 03:49:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 981
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.5
200 OK 1.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3703)
Hash a94d97f8e8fb7ad382918f892fb7ab3f
fed47123b6dbbd43644ddede3d891b03e4a678cc
a0c4bae3be34ab2fa9b0d2e171044615fc2a877def9a508e10018953b56cd956
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.5 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1680
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.3 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 8.2 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash a0a1c8194f131320e1798f90a7b1262a
3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8169
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.1
200 OK 362 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash e8d5d31df895a6c2383b0e05069feafe
2c4d7fab936f9a01bd13a4bacffeb934ad87ab3f
8a40406ebafe3c8f23e22baf52860d1bcd737d6c744be0f43c37c15fb589270b
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:18:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 362
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.8.2
200 OK 8.7 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.8.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d3ee2dede6012ab91b036569d3fe31b8
90894112b942808e9ef2f12a181bd736a832f63d
1ddff1e6a05739e952f251b3e92b89d309490e3c29ed16924ab118a40bda178f
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.8.2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:18:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8665
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.5
200 OK 7.0 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (24339)
Hash 34c430c8bf992881cbbb7ba6da9e117b
aa76408976e2128c0e77088b523f29fd0864b793
926d9fdd2a11b48b209837d5c6c1f0c8739d2660fb037b281c1ab93b5b848f2b
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.5 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7047
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/index.php?rest_route=/calltrk/swap.js
200 OK 13 kB URL HTTP/2 www.optimizedhealthplans.com/index.php?rest_route=/calltrk/swap.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type C source, ASCII text, with very long lines (32764)
Hash b88d942aa3fe69e3518272d0f569ef7c
722f8ac9b34a6af320b84c585f8704393207c38b
f8497671e75e682d1b2a1791b116b671f57cfe382f83780a19ba41187ce923f7
Analyzer Verdict Alert quad9 Sinkholed
GET /index.php?rest_route=/calltrk/swap.js HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
link: <https://www.optimizedhealthplans.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
cache-control: max-age=60, public
x-calltrk-wp-version: 0.4.10
vary: Accept-Encoding
content-encoding: gzip
content-length: 12573
content-type: application/javascript; charset=UTF-8
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78b7645f1c755a897caba5a6e41f40be
3aae69c7b4828bbcf4ab3149e2c95445e582c616
ae99de957282172b4585bba3f8d09a3f6e774a1bbf270031b99f31a1b07c219a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78b7645f1c755a897caba5a6e41f40be
3aae69c7b4828bbcf4ab3149e2c95445e582c616
ae99de957282172b4585bba3f8d09a3f6e774a1bbf270031b99f31a1b07c219a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 12 Oct 2022 19:34:08 GMT
expires: Thu, 12 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 376065
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78b7645f1c755a897caba5a6e41f40be
3aae69c7b4828bbcf4ab3149e2c95445e582c616
ae99de957282172b4585bba3f8d09a3f6e774a1bbf270031b99f31a1b07c219a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20028, version 1.0\012- data
Hash 2bfde17b9a1384ce64af78db1b87a82f
8effd23e482511e249c3f8e91cdc503729b93598
5c2d662e92bcbf1a5970b97040f901031295e79a96314db8302f549003022087
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 11 Oct 2022 17:16:50 GMT
expires: Wed, 11 Oct 2023 17:16:50 GMT
cache-control: public, max-age=31536000
age: 470703
last-modified: Tue, 26 Apr 2022 16:41:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 12 Oct 2022 19:34:08 GMT
expires: Thu, 12 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 376065
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78b7645f1c755a897caba5a6e41f40be
3aae69c7b4828bbcf4ab3149e2c95445e582c616
ae99de957282172b4585bba3f8d09a3f6e774a1bbf270031b99f31a1b07c219a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
content-length: 78196
content-type: font/woff2
date: Mon, 17 Oct 2022 04:01:53 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
content-length: 76764
content-type: font/woff2
date: Mon, 17 Oct 2022 04:01:53 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1662022463
200 OK 22 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1662022463
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 035ecf2141c74326de7f583550e71cbd
cbb30c22b9b5ec6afbc9c1cf17b337f6fb43ba07
7a34ec451e1f5c1ca8beff284a4d84f66b15c45cefcd7d1c51173cebd412ccef
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1662022463 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8202
Expires: Mon, 17 Oct 2022 06:18:35 GMT
Date: Mon, 17 Oct 2022 04:01:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8202
Expires: Mon, 17 Oct 2022 06:18:35 GMT
Date: Mon, 17 Oct 2022 04:01:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8202
Expires: Mon, 17 Oct 2022 06:18:35 GMT
Date: Mon, 17 Oct 2022 04:01:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8202
Expires: Mon, 17 Oct 2022 06:18:35 GMT
Date: Mon, 17 Oct 2022 04:01:53 GMT
Connection: keep-alive
www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:53 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/2021/12/ohp_logo_c.png
200 OK 14 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/2021/12/ohp_logo_c.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 400 x 300, 8-bit colormap, non-interlaced\012- data
Hash 52ccfff4776603c526d08cda9a71d311
47fcb9c968a57a4d4447760f3fe809346f50426b
67d1a018e3a43dc7765478b6a02bb997e31dad9351698c6fb72978b093e3c7fa
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/ohp_logo_c.png HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 10:23:56 GMT
accept-ranges: bytes
content-length: 14199
content-type: image/png
date: Mon, 17 Oct 2022 04:01:53 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc93d45-62e4-4537-a211-c582543eaa7b.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc93d45-62e4-4537-a211-c582543eaa7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 509e51b18f9e9c33c804eb2369fa910a
efad26648384acff4bb092cf4921c40809113df4
e19faa2460c26303e743776f91603ac203695ee55c7a8240b3f3b51cc94dbfa9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc93d45-62e4-4537-a211-c582543eaa7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7362
x-amzn-requestid: 921346a1-3abb-49a3-b26c-56491dabcae9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aHfyxGPSIAMF5gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634c79ab-6750942e5ee91cdb5d3b0781;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YEAL2ZIEu0FocclW4xbr5DneNRWQHwN8uMH9MZqCHzxduRrL8kcWvw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 22:05:16 GMT
age: 21397
etag: "efad26648384acff4bb092cf4921c40809113df4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
platform-api.sharethis.com/js/sharethis.js
200 OK 50 kB URL HTTP/2 platform-api.sharethis.com/js/sharethis.js
IP
Hash a0b67739ea868d7d373114df63d55bb0
7f9f683535c4230915a1f1729cf0319357da8735
94083fe447120ef8333eb1d493ae1089837c77706a73f54ec30ebc03c90b506d
GET /js/sharethis.js HTTP/1.1
Host: platform-api.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-encoding: gzip
edge-control: cache-maxage=60m,downstream-ttl=60m
x-frame-options: SAMEORIGIN
date: Mon, 17 Oct 2022 03:59:02 GMT
cache-control: max-age=600, public
etag: W/"3011a-1tH8M8TNdKB39qADlCdHeiBv0FM"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0oP4RN-G_P5Q0IEw8EfbdqKpPhkENhT60NPOZGnToSDAWi8dqSDGUA==
age: 171
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 440811a19987ddee099df289d9b61e79
ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1
1309e9dcb36858de70ef82900ec1ad429fbb795ddb9823fd1c290b18f4e2c1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9623
x-amzn-requestid: b3d5bd8d-111b-4d50-9720-71f72c62f860
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7Q8oFLRIAMFrEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347951d-613e5e810f420e4c0ba3e6f6;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 04:33:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OA9iHADyiam26eo88jYDECifkqeBaTjsuoeHD2YOy0aZJZEGhG-xow==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 21:37:03 GMT
age: 23090
etag: "ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 44 kB URL HTTP/2 www.optimizedhealthplans.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 1b11d6d9f0ca74f9928b2698983a4eb8
79833ec3779efa2673e939f918dad36175aa214c
c56074ff9dfb834b2156af14bd96094add02404fd19220e3fab9d17a0c8d22d0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Oct 2022 01:04:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65542b63-5aa6-421b-b7f2-d64b54fe9a69.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65542b63-5aa6-421b-b7f2-d64b54fe9a69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0e614eccca696e26270bb1382b136f5
61e1820d00285415b936d093ccd9053918548342
07afb579b626c887a2b1cf85ff5ec7bf84238aa903993d5817363706cc618c53
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65542b63-5aa6-421b-b7f2-d64b54fe9a69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7784
x-amzn-requestid: 3f74490f-6cf5-4e7a-b811-2970f8dda2aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aHf0VFP9IAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634c79b5-6e26e9b2395cdd531dfbf726;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 21:37:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: x_zaqf9tEeVqkqCycO8dgNHcDHbi7UsCG5oJd5utfN5iNrj5HkkHVA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 22:08:14 GMT
age: 21219
etag: "61e1820d00285415b936d093ccd9053918548342"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc13445b3-9c5e-4c83-93aa-0b61169ee10c.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc13445b3-9c5e-4c83-93aa-0b61169ee10c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfe1672dbec21f6a55005ed90f1660dc
1d17f6e2705396db6425646879e595474a10dde3
55c58208ef3c1a85969ea23090c759d2507bf09c8ee6ce91e4e5e01e8d54484d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc13445b3-9c5e-4c83-93aa-0b61169ee10c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7665
x-amzn-requestid: d8ca23b7-4275-4063-8e04-e264635ad16f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aHfyyG_XIAMFQuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634c79ab-58b8f5ff5c8a8a175efccb50;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: cHyS_7V9aUQt17RYDfVqpk3fgsDUlUmuxOAF7B1eMz65dR8Cr6PSlg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 21:49:02 GMT
age: 22371
etag: "1d17f6e2705396db6425646879e595474a10dde3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/index.php?rest_route=/Calltrk/v1/store
204 No Content 0 B URL HTTP/2 www.optimizedhealthplans.com/index.php?rest_route=/Calltrk/v1/store
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /index.php?rest_route=/Calltrk/v1/store HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 213
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
x-robots-tag: noindex
link: <https://www.optimizedhealthplans.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: POST
access-control-allow-origin: https://www.optimizedhealthplans.com
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Origin
set-cookie: calltrk_referrer=direct; expires=Mon, 17-Oct-2022 04:07:58 GMT; Max-Age=365; path=/; domain=optimizedhealthplans.com
calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; expires=Mon, 17-Oct-2022 04:07:58 GMT; Max-Age=365; path=/; domain=optimizedhealthplans.com
calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; expires=Mon, 17-Oct-2022 04:07:58 GMT; Max-Age=365; path=/; domain=optimizedhealthplans.com
date: Mon, 17 Oct 2022 04:01:53 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:53 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-contact-form-7-tracker.js?ver=1.16.1
409 Conflict 83 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-contact-form-7-tracker.js?ver=1.16.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-contact-form-7-tracker.js?ver=1.16.1 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
buttons-config.sharethis.com/js/5ef55234dcc08b0012d8d3d8.js
200 OK 198 B URL HTTP/2 buttons-config.sharethis.com/js/5ef55234dcc08b0012d8d3d8.js
IP
File type ASCII text, with no line terminators
Hash daac0ecc4d0eefac272e109e274b0ef7
b8e360be330d1a18f1b87d9ab0b3e6f982f05057
323df7a4e1f831467eb6401bb63b144c430cb4fa593d9c351cac87cbecd862ac
GET /js/5ef55234dcc08b0012d8d3d8.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 198
last-modified: Wed, 06 Jul 2022 02:35:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 17 Oct 2022 04:01:47 GMT
cache-control: public, max-age=60
etag: "daac0ecc4d0eefac272e109e274b0ef7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qQKlXjwVcL7YZurGnrC20nRaeLorXNI-5V34c4WuGMwAbUcVfa19YA==
age: 8
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bec8662253487535e988ec1ffb1f53c6
b752af012181b7f6e14413f0482cdf9d6e18af35
2fee7612e3563cd018022c186c8d97b619888a54096a35f0d736a84b00baa18f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4623
Cache-Control: max-age=107522
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:54 GMT
Etag: "634bc2a5-1d7"
Expires: Tue, 18 Oct 2022 09:53:56 GMT
Last-Modified: Sun, 16 Oct 2022 08:36:53 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 17 Oct 2022 02:41:09 GMT
expires: Mon, 17 Oct 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 4845
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=63301
date: Mon, 17 Oct 2022 04:01:54 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 17 Oct 2022 03:22:14 GMT
expires: Mon, 17 Oct 2022 05:22:14 GMT
cache-control: public, max-age=7200
age: 2380
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4968b6ba4593c5a26ff6f56a60231029
ec4d98794f75aad9181a0aa7a4f0488de726a557
522aab87cbb3b9a8f4d0fc55cf2ff30094ffb327937f3fc235db48e7b8f2fa0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 17 Oct 2022 04:01:54 GMT
expires: Mon, 17 Oct 2022 04:01:54 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6e1c15b41a9baf3dcf134b8132912a6
7a9c0e0a369023808a9d9732610cd6f206c584ab
f247489aeb512583b0e1721922abd34e7d98bfb71d2de21d0c6f179cf585d365
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js
200 OK 1.4 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3262)
Hash 6bf54a780bcc9420ac1230f9628d8949
f144d1e7d7719ea2cf5f6eb3d04aaf1e0fc34f25
b4004d7b6a41a1992a445f8c46e5b26d1a0553e7c9c73d40186da1f4caacfb9a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 08:54:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1408
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/index.php?rest_route=/calltrk/sessions/companies/338365741/external_forms.js
200 OK 8.4 kB URL HTTP/2 www.optimizedhealthplans.com/index.php?rest_route=/calltrk/sessions/companies/338365741/external_forms.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (23339), with no line terminators
Hash c40b59f01177fb917973b701c333c115
cbf0700057e9972aa181c0e5bf19795b5894c84e
d44f226288452f74f781141af316543cd068cf8c6b14419744e2e1a3de980e03
Analyzer Verdict Alert quad9 Sinkholed
GET /index.php?rest_route=/calltrk/sessions/companies/338365741/external_forms.js HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
link: <https://www.optimizedhealthplans.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
x-calltrk-wp-version: 0.4.10
vary: Accept-Encoding
content-encoding: gzip
content-length: 8388
content-type: application/javascript; charset=UTF-8
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
200 OK 93 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 93372, version 1.0\012- data
Hash aab0bb3379e0eb7ebc26071db61fbd57
711c8d350c4192c2f1aa7f73551445b89fb4b161
691fa7d17effc7d303eda0ad7e4a1d91b2f375506cfc8a774480cc2b55f156ea
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
content-length: 93372
content-type: font/woff2
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/index.php?rest_route=/calltrk/sessions/group/0/8fb875e7b43ca98c5ca1/12/swap_session.json
200 OK 99 B URL HTTP/2 www.optimizedhealthplans.com/index.php?rest_route=/calltrk/sessions/group/0/8fb875e7b43ca98c5ca1/12/swap_session.json
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JSON data\012- , ASCII text
Hash b291061095b272170953171dd15c513f
a8868911446c3d91a47ac6353c34a78bc12542db
4a41a9e5948ebc131c41c1dc230e67f27b5ab40fb91603e859b56309cbcdac7a
Analyzer Verdict Alert quad9 Sinkholed
POST /index.php?rest_route=/calltrk/sessions/group/0/8fb875e7b43ca98c5ca1/12/swap_session.json HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 414
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
link: <https://www.optimizedhealthplans.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
vary: Accept-Encoding
content-encoding: gzip
content-length: 99
content-type: application/json; charset=UTF-8
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f05f7d85c5d7c2aa09651804f80a019
cd118fbc41657bfdf0fcfb9e3a4a2813f3b08e5b
76a6c1ae0a435403ac10b6478f029bb8b871dbdcc2a2c7e3e97b56982a9767e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.sharethis.mgr.consensu.org/is_eu
200 OK 14 B URL HTTP/2 c.sharethis.mgr.consensu.org/is_eu
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90e18c69e971b2f0ceb394a254890275
cbf7e34dea43d873694e7282f2b46b6da870072a
7a9029645ca045423baf70eb0ef119d0640061fbb4813631607dc9b44771bec1
GET /is_eu HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 14
access-control-allow-origin: *
cache-control: max-age=3600, public
date: Mon, 17 Oct 2022 04:01:54 GMT
etag: W/"e-y/fjTepD2HNpTnKC8rRrbahwByo"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AjqMxXESYPzD_9O8Gt1siK3M-2-0pel--8LXhd4dRDTb9pb-ZDFDPw==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/361514949/?random=1665979318712&cv=9&fst=1665979318712&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&tiba=Page%20not%20found%20-%20Optimized%20Health%20Plans&auid=1514108719.1665978472&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/361514949/?random=1665979318712&cv=9&fst=1665979318712&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&tiba=Page%20not%20found%20-%20Optimized%20Health%20Plans&auid=1514108719.1665978472&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2368), with no line terminators
Hash aefb8633e0990c2056d35c6c0435dadc
b892837f29632474c8202d2873b1393f1af4adc8
99ac480dc08ca4ca45d982eb64bea785ab36fd822433addba3f0539f4f865f4c
GET /pagead/viewthroughconversion/361514949/?random=1665979318712&cv=9&fst=1665979318712&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&tiba=Page%20not%20found%20-%20Optimized%20Health%20Plans&auid=1514108719.1665978472&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 17 Oct 2022 04:01:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1069
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 17-Oct-2022 04:16:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/2015/08/OHP-144-32x32.png
200 OK 2.5 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/2015/08/OHP-144-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 8676b826e6b0b32f8670e1de532a97de
e81f99d39fbfc5bd789911df9e6485927c537681
46a4fe83607e4b2991e6ca6cc58e9d05ed1432a962e1ef73945eaee791dc7087
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2015/08/OHP-144-32x32.png HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Nov 2021 07:32:23 GMT
accept-ranges: bytes
content-length: 2509
content-type: image/png
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1921836%26time%3D1665979318707%26url%3Dhttps%253A%252F%252Fwww.optimizedhealthplans.com%252Fodel%252Feuaapdruqnadeii%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJFuUDoXV_gtAAAAYPkGvMT4-K-BmjFBhpZPsK4-1A9imUcqUocL70BwBLIRFtz8EpVOI_mcMTLLQ; Max-Age=2592000; Expires=Wed, 16 Nov 2022 04:01:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQK7fq1nszo8-QAAAYPkGvMT2Y_llJ1W9HrjDcIOO8RdsTpmmKb4vLMrgy9_WlqlpFg9lGU4kj6WWYZcheM9yQ; Max-Age=2592000; Expires=Wed, 16 Nov 2022 04:01:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&42227e93-66b8-485b-8805-2bde3868d601"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 17-Oct-2023 04:01:54 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2408:u=1:x=1:i=1665979314:t=1666065714:v=2:sig=AQFIECm4SKOw6ORecvNdDcHglLAQlMAI"; Expires=Tue, 18 Oct 2022 04:01:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXrMwlFXkjChZFb/WyOlw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AE3D582344C54C0280AD2316BA68C86C Ref B: OSL30EDGE0317 Ref C: 2022-10-17T04:01:54Z
date: Mon, 17 Oct 2022 04:01:54 GMT
content-length: 0
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/uploads/2015/08/OHP-144-192x192.png
200 OK 48 kB URL HTTP/2 www.optimizedhealthplans.com/wp-content/uploads/2015/08/OHP-144-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a39dccedbf922d75bb2da3247cba786
bbe4201442afc0f616e23da55825f67988801be8
3108306417f6231f4224087e4431baf7e6a7bc8ca9d80c5793320e2ede6a9143
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2015/08/OHP-144-192x192.png HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Nov 2021 07:32:39 GMT
accept-ranges: bytes
content-length: 47876
content-type: image/png
date: Mon, 17 Oct 2022 04:01:54 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7db5bdcb1e555ced9bab9f7309025fd2
559ceaddc574f9dac4a51e7ef07b62b33363d1af
75c2d088b3bf614e2b92a4f57c6eaee2f7aa4457d4b63ffd61f2b154541bf721
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136836
Date: Mon, 17 Oct 2022 04:01:54 GMT
Etag: "634c3b99-1d7"
Expires: Tue, 18 Oct 2022 18:02:30 GMT
Last-Modified: Sun, 16 Oct 2022 17:12:57 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UJ7yo9iyGhaWWBWp2SuJ_jUFEWfE95X39knPZo_wASS11sEPH3HBHQ==
Age: 2973
www.facebook.com/tr/?id=310763437492853&ev=PageView&dl=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&rl=&if=false&ts=1665979319341&sw=1280&sh=1024&v=2.9.85&r=stable&a=wordpress-6.0.2-3.0.7&ec=0&o=30&fbp=fb.1.1665978473881.168882611&it=1665979318737&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=310763437492853&ev=PageView&dl=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&rl=&if=false&ts=1665979319341&sw=1280&sh=1024&v=2.9.85&r=stable&a=wordpress-6.0.2-3.0.7&ec=0&o=30&fbp=fb.1.1665978473881.168882611&it=1665979318737&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=310763437492853&ev=PageView&dl=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&rl=&if=false&ts=1665979319341&sw=1280&sh=1024&v=2.9.85&r=stable&a=wordpress-6.0.2-3.0.7&ec=0&o=30&fbp=fb.1.1665978473881.168882611&it=1665979318737&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Mon, 17 Oct 2022 04:01:55 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=1433871710&gjid=1491236338&_gid=1690638065.1665978473&_u=SCCAAUIhAAAAACAAI~&z=877019917
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=1433871710&gjid=1491236338&_gid=1690638065.1665978473&_u=SCCAAUIhAAAAACAAI~&z=877019917
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=1433871710&gjid=1491236338&_gid=1690638065.1665978473&_u=SCCAAUIhAAAAACAAI~&z=877019917 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.optimizedhealthplans.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
l.sharethis.com/pview?event=pview&hostname=www.optimizedhealthplans.com&location=%2Fodel%2Feuaapdruqnadeii&product=ga&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Page%20not%20found%20-%20Optimized%20Health%20Plans&cms=unknown&publisher=5ef55234dcc08b0012d8d3d8&sop=true&version=st_sop.js&lang=en
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&hostname=www.optimizedhealthplans.com&location=%2Fodel%2Feuaapdruqnadeii&product=ga&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Page%20not%20found%20-%20Optimized%20Health%20Plans&cms=unknown&publisher=5ef55234dcc08b0012d8d3d8&sop=true&version=st_sop.js&lang=en
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=www.optimizedhealthplans.com&location=%2Fodel%2Feuaapdruqnadeii&product=ga&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Page%20not%20found%20-%20Optimized%20Health%20Plans&cms=unknown&publisher=5ef55234dcc08b0012d8d3d8&sop=true&version=st_sop.js&lang=en HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://www.optimizedhealthplans.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 17 Oct 2022 04:01:55 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=600831941&gjid=695353872&_gid=1690638065.1665978473&_u=SCCAAUIhAAAAACAAI~&z=1596601634
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=600831941&gjid=695353872&_gid=1690638065.1665978473&_u=SCCAAUIhAAAAACAAI~&z=1596601634
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=600831941&gjid=695353872&_gid=1690638065.1665978473&_u=SCCAAUIhAAAAACAAI~&z=1596601634 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.optimizedhealthplans.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=126865711&gjid=308946441&_gid=1690638065.1665978473&_u=SCCAAUIgAAAAACAAI~&z=859043731
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=126865711&gjid=308946441&_gid=1690638065.1665978473&_u=SCCAAUIgAAAAACAAI~&z=859043731
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=126865711&gjid=308946441&_gid=1690638065.1665978473&_u=SCCAAUIgAAAAACAAI~&z=859043731 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.optimizedhealthplans.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=807926580014200&ev=PageView&dl=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&rl=&if=false&ts=1665979319477&sw=1280&sh=1024&v=2.9.85&r=stable&ec=0&o=30&fbp=fb.1.1665978473881.168882611&it=1665979318737&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=807926580014200&ev=PageView&dl=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&rl=&if=false&ts=1665979319477&sw=1280&sh=1024&v=2.9.85&r=stable&ec=0&o=30&fbp=fb.1.1665978473881.168882611&it=1665979318737&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=807926580014200&ev=PageView&dl=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&rl=&if=false&ts=1665979319477&sw=1280&sh=1024&v=2.9.85&r=stable&ec=0&o=30&fbp=fb.1.1665978473881.168882611&it=1665979318737&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Mon, 17 Oct 2022 04:01:55 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1921836%26time%3D1665979318707%26url%3Dhttps%253A%252F%252Fwww.optimizedhealthplans.com%252Fodel%252Feuaapdruqnadeii%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1921836%26time%3D1665979318707%26url%3Dhttps%253A%252F%252Fwww.optimizedhealthplans.com%252Fodel%252Feuaapdruqnadeii%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1921836%26time%3D1665979318707%26url%3Dhttps%253A%252F%252Fwww.optimizedhealthplans.com%252Fodel%252Feuaapdruqnadeii%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.optimizedhealthplans.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&36268573-ae4c-4c1d-8d6c-6ed423969d5f"; Domain=.linkedin.com; Expires=Tue, 17-Oct-2023 04:01:55 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&2022101704015522fc8299-9398-46c6-8f9f-ec5819306966AQH975CGNPd72EV9ickwo-87bzkpZ2lL"; Domain=.www.linkedin.com; Expires=Tue, 17-Oct-2023 04:01:55 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjU5NzkzMTU7MjswMjF96uscg1ZB947uklGjtGjPDFsJqZWCJSp0eMVnQf5H7A==; Domain=.linkedin.com; Expires=Sat, 15 Apr 2023 04:01:55 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2408:u=1:x=1:i=1665979315:t=1666065715:v=2:sig=AQGnhYk48qkux43jkNPwJIXXoa3X24RT"; Expires=Tue, 18 Oct 2022 04:01:55 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXrMwlH2mCU3kYHRm5N/g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 30261AC25D814E7484981D7F2A8FB148 Ref B: OSL30EDGE0317 Ref C: 2022-10-17T04:01:55Z
date: Mon, 17 Oct 2022 04:01:54 GMT
content-length: 0
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/361514949/?random=1665979318712&cv=9&fst=1665979200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&tiba=Page%20not%20found%20-%20Optimized%20Health%20Plans&async=1&fmt=3&is_vtc=1&random=2720329032&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/361514949/?random=1665979318712&cv=9&fst=1665979200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&tiba=Page%20not%20found%20-%20Optimized%20Health%20Plans&async=1&fmt=3&is_vtc=1&random=2720329032&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/361514949/?random=1665979318712&cv=9&fst=1665979200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaaa0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&tiba=Page%20not%20found%20-%20Optimized%20Health%20Plans&async=1&fmt=3&is_vtc=1&random=2720329032&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=600831941&_u=SCCAAUIhAAAAACAAI~&z=766961242
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=600831941&_u=SCCAAUIhAAAAACAAI~&z=766961242
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=600831941&_u=SCCAAUIhAAAAACAAI~&z=766961242 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=1433871710&_u=SCCAAUIhAAAAACAAI~&z=1623798979
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=1433871710&_u=SCCAAUIhAAAAACAAI~&z=1623798979
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=1433871710&_u=SCCAAUIhAAAAACAAI~&z=1623798979 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=126865711&_u=SCCAAUIgAAAAACAAI~&z=1994416355
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=126865711&_u=SCCAAUIgAAAAACAAI~&z=1994416355
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-70950164-1&cid=136564844.1665978473&jid=126865711&_u=SCCAAUIgAAAAACAAI~&z=1994416355 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 17 Oct 2022 04:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6809539bccb0517a5f375737f4f7fdc1
1c6e104e96b0e8effbbdffd6ebe9bdfc64b72e6f
33d9c06d64e617731224f7328d8485377e68b840ad27eee5c919f67a2b20ddee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 17 Oct 2022 04:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=1921836&time=1665979318707&url=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Feuaapdruqnadeii&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.optimizedhealthplans.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&ee27c722-96a5-4b6d-8327-19d0dd3afbd0"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 17-Oct-2023 04:01:55 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2361:u=1:x=1:i=1665979315:t=1666065715:v=2:sig=AQFbNUcPhbcng2vw-Tt0lFq_4QnbCSCI"; Expires=Tue, 18 Oct 2022 04:01:55 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXrMwlKelhlMjDGMlXolg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DC47D8FC3EA34C9AA9DD76F960C9CFF4 Ref B: OSL30EDGE0317 Ref C: 2022-10-17T04:01:55Z
date: Mon, 17 Oct 2022 04:01:55 GMT
content-length: 0
X-Firefox-Spdy: h2
c.sharethis.mgr.consensu.org/static/media/gear.png
200 OK 1.0 kB URL HTTP/2 c.sharethis.mgr.consensu.org/static/media/gear.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 6271a8ca09ee8e78c9aa95b7e968cf35
9aaf25ea353fc7f68ce308ee031dc8a6ea1da33d
9a8d6fec895b72510a781f8c72643450f7cdac47e65136de8c132526e9bccc30
GET /static/media/gear.png HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1048
cache-control: max-age=86400, public
date: Sun, 16 Oct 2022 23:01:42 GMT
etag: W/"418-mq8l6jU/x/aM4wjuAx3Ipuodoz0"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a1II1p7w8WzxhaKepcOzouJc0ARPsY_9DYhH_CY7Z_r3FyhT_EpTnw==
age: 18013
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Oct 2022 05:42:51 GMT
expires: Fri, 13 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 339544
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4
200 OK 0 B URL HTTP/2 www.optimizedhealthplans.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4 HTTP/1.1
Host: www.optimizedhealthplans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/odel/euaapdruqnadeii
Cookie: _gcl_au=1.1.1514108719.1665978472; calltrk_session_id=bf6d4c9a-af67-4d7d-bba3-d74f153eb531; calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.optimizedhealthplans.com%2Fodel%2Ftaearleepl; _ga=GA1.2.136564844.1665978473; _gid=GA1.2.1690638065.1665978473; calltrk_fcid=48aa558c-82b4-4117-8504-00f9de948c54; _fbp=fb.1.1665978473881.168882611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 20:17:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16151
content-type: application/javascript
date: Mon, 17 Oct 2022 04:01:52 GMT
server: Apache
X-Firefox-Spdy: h2
c.sharethis.mgr.consensu.org/cmp-v2.js
200 OK 0 B URL HTTP/2 c.sharethis.mgr.consensu.org/cmp-v2.js
IP
GET /cmp-v2.js HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-encoding: gzip
date: Mon, 17 Oct 2022 03:53:56 GMT
cache-control: max-age=600, public
etag: W/"1e520e-xmVeAvgEKipiBnOijNf/GYBaahQ"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8lmuhMuhMHGF0u0j4XZj2Z0TXwZf3iZAuPBf-vBg5XzOJS89qPLPUA==
age: 492
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMerriweather%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMerriweather%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMerriweather%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 17 Oct 2022 04:01:52 GMT
date: Mon, 17 Oct 2022 04:01:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.sharethis.mgr.consensu.org/portal-v2.html
200 OK 0 B URL HTTP/2 c.sharethis.mgr.consensu.org/portal-v2.html
IP
GET /portal-v2.html HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-encoding: gzip
date: Mon, 17 Oct 2022 03:06:23 GMT
cache-control: max-age=3600, public
etag: W/"865-g9QqzjbIJI1xmvSY3DM2A/8Cpl8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NaUOO8hXRG_pLOiP3tgj2JWEAvNehhmZThTglRhfnv1Jt6sbmrTX4Q==
age: 3348
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c.sharethis.mgr.consensu.org/v2/vendor-list.json
200 OK 0 B URL HTTP/2 c.sharethis.mgr.consensu.org/v2/vendor-list.json
IP
GET /v2/vendor-list.json HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Referer: https://www.optimizedhealthplans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
cache-control: max-age=86400, public
date: Sun, 16 Oct 2022 21:52:00 GMT
etag: W/"61faf-6RYKa22CAzWz4xFoHlH1VI8Rut4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X_RslrXPgbF_CESJu94LHDiYBBbK38NoommGiT1cu7OHASdBsS4U7A==
age: 22195
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c.sharethis.mgr.consensu.org/v2/cmp-list.json
200 OK 0 B URL HTTP/2 c.sharethis.mgr.consensu.org/v2/cmp-list.json
IP
GET /v2/cmp-list.json HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.optimizedhealthplans.com/
Origin: https://www.optimizedhealthplans.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=86400, public
content-encoding: gzip
date: Sun, 16 Oct 2022 05:20:17 GMT
etag: W/"26e7-3nhjWDvLH0eDZY9hhROjnftKImY"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VYeX4gV3MkRRb6srfPEzslp9jyoTB_WdjjhP7XmDoQK7td0A-dJSzQ==
age: 81698
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
108.167.142.43
23.36.76.121
18.196.212.55
93.184.220.29
31.13.72.36
0.0.0.0