Report - adss-health.com/wp-content/plugins/hot-random-image/index.html

Report Overview

Submitted URL
adss-health.com/wp-content/plugins/hot-random-image/index.html
IP
91.108.123.241
ASN
#0
Submitted
2024-04-23 15:43:55
Access
public
Website Title
Checking your browser before accessing. Just a moment...
Final URL
adss-health.com/wp-content/plugins/hot-random-image/index.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
adss-health.com	unknown	2022-11-02	2022-11-14	2024-04-18	20 kB	81 kB	91.108.123.241

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	unknown	37 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31:25 Last Seen2024-05-03 19:16:30 Times Seen234006 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	unknown	79 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38:58 Last Seen2024-05-03 19:15:00 Times Seen125397 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	adss-health.com/hcdn-cgi/jschallenge	182 B	2024-04-23	2024-04-23
Pretty URL adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-23 17:43:56 Last Seen2024-04-23 17:43:56 Times Seen8 Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 Loading...

	adss-health.com/wp-content/plugins/hot-random-image/index.html	3.8 kB	2023-11-12	2024-05-03
Pretty URL adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-12 02:47:25 Last Seen2024-05-03 17:58:37 Times Seen52 Hash 51e189f3bed2b8fd301208bf717f8c64 79f795884dbd9d843435bd03fc6ef3b8cfd581cd fa2fabde1d6234d341a131ca74541c707cca4eea376ddcba3f8d34de934d18a4 Loading...

HTTP Transactions (34)

	URL	IP	Response	Size
	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:30 GMT content-type: text/html content-length: 2193 vary: Accept-Encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 2f4b9f88dd5362e9c9ff73c78afa4f93-bnk-edge2 X-Firefox-Spdy: h2

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:30 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: ad79d7a6d70a81229ced91d0128b42f5-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 27e01a16334fccdb26622805cb5cc7a8-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:30 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c40c654be62c91dd15dddfd40a79607a-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge-validate	91.108.123.241		0 B
URL adss-health.com/hcdn-cgi/jschallenge-validate IP 91.108.123.241:0 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `POST /hcdn-cgi/jschallenge-validate HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html Content-Type: application/x-www-form-urlencoded Content-Length: 74 Origin: http://adss-health.com DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:33 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: hcdn=AQEAHnaTd1ClEFNxYuaf4C_jZ_WGSVtx6D6DBnmPkpVunz4l1ydmAAAAAADOAABeH9pVohDpI8WKobplF7AUAAAA3E3k_nxBP-EdDhqnx7FouQ; Path=/; SameSite=Lax; HttpOnly alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 174a2061ce76133f0be429080440b8eb-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: hcdn=AQEAHnaTd1ClEFNxYuaf4C_jZ_WGSVtx6D6DBnmPkpVunz4l1ydmAAAAAADOAABeH9pVohDpI8WKobplF7AUAAAA3E3k_nxBP-EdDhqnx7FouQ Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:33 GMT content-type: text/html content-length: 2193 vary: accept-encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3969ddb62c63a377f6f485743b91e486-bnk-edge1

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAHnaTd1ClEFNxYuaf4C_jZ_WGSVtx6D6DBnmPkpVunz4l1ydmAAAAAADOAABeH9pVohDpI8WKobplF7AUAAAA3E3k_nxBP-EdDhqnx7FouQ Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:34 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: ee8899846d2fbcf3ed0c0b5c9b85b969-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAHnaTd1ClEFNxYuaf4C_jZ_WGSVtx6D6DBnmPkpVunz4l1ydmAAAAAADOAABeH9pVohDpI8WKobplF7AUAAAA3E3k_nxBP-EdDhqnx7FouQ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: ae730ae61a9a50762697424036ca83fa-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAHnaTd1ClEFNxYuaf4C_jZ_WGSVtx6D6DBnmPkpVunz4l1ydmAAAAAADOAABeH9pVohDpI8WKobplF7AUAAAA3E3k_nxBP-EdDhqnx7FouQ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:34 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3dffefd20f8dddcbd79d2c0170bc5c2c-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge-validate	91.108.123.241		0 B
URL adss-health.com/hcdn-cgi/jschallenge-validate IP 91.108.123.241:0 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /hcdn-cgi/jschallenge-validate HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html Content-Type: application/x-www-form-urlencoded Content-Length: 74 Origin: http://adss-health.com DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAHnaTd1ClEFNxYuaf4C_jZ_WGSVtx6D6DBnmPkpVunz4l1ydmAAAAAADOAABeH9pVohDpI8WKobplF7AUAAAA3E3k_nxBP-EdDhqnx7FouQ Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:37 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: hcdn=AQEAz3lIBCTDOa2ejWkHCi_oeFI71JzfNXwALDS-sxV6ar0l1ydmAAQAAADnAACpdyPVBYwnMSP5j54BEGjaAAAArNunt_gtoBNRuQcRVAr8Pw; Path=/; SameSite=Lax; HttpOnly alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 68658b04b697e5dfdfc24f31c3f58a52-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: hcdn=AQEAz3lIBCTDOa2ejWkHCi_oeFI71JzfNXwALDS-sxV6ar0l1ydmAAQAAADnAACpdyPVBYwnMSP5j54BEGjaAAAArNunt_gtoBNRuQcRVAr8Pw Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:37 GMT content-type: text/html content-length: 2193 vary: accept-encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 565c8df7788bf91e75ba48f4ad34de80-bnk-edge1

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAz3lIBCTDOa2ejWkHCi_oeFI71JzfNXwALDS-sxV6ar0l1ydmAAQAAADnAACpdyPVBYwnMSP5j54BEGjaAAAArNunt_gtoBNRuQcRVAr8Pw Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:37 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 6e4b366432360eb34a15fbfdf99b4fc1-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAz3lIBCTDOa2ejWkHCi_oeFI71JzfNXwALDS-sxV6ar0l1ydmAAQAAADnAACpdyPVBYwnMSP5j54BEGjaAAAArNunt_gtoBNRuQcRVAr8Pw Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:37 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 5cfdb1b95f243a9911c506b137b80fb9-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAz3lIBCTDOa2ejWkHCi_oeFI71JzfNXwALDS-sxV6ar0l1ydmAAQAAADnAACpdyPVBYwnMSP5j54BEGjaAAAArNunt_gtoBNRuQcRVAr8Pw Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:37 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: cf1b931bbfdb7e791a403ebf8e210209-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge-validate	91.108.123.241		0 B
URL adss-health.com/hcdn-cgi/jschallenge-validate IP 91.108.123.241:0 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /hcdn-cgi/jschallenge-validate HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html Content-Type: application/x-www-form-urlencoded Content-Length: 74 Origin: http://adss-health.com DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAz3lIBCTDOa2ejWkHCi_oeFI71JzfNXwALDS-sxV6ar0l1ydmAAQAAADnAACpdyPVBYwnMSP5j54BEGjaAAAArNunt_gtoBNRuQcRVAr8Pw Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:40 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: hcdn=AQEAm8qYTq4OOHJznC6c_32Dhua9dzhqIGx5IyM2M5Yhh5sl1ydmAAcAAADnAABGTe2zu7X6WVHnXxJYISTZAAAASofrcLTkQY6oZA6P3ShkZw; Path=/; SameSite=Lax; HttpOnly alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c8359677d75f791b4ae42fcacfb5821f-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: hcdn=AQEAm8qYTq4OOHJznC6c_32Dhua9dzhqIGx5IyM2M5Yhh5sl1ydmAAcAAADnAABGTe2zu7X6WVHnXxJYISTZAAAASofrcLTkQY6oZA6P3ShkZw Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:40 GMT content-type: text/html content-length: 2193 vary: accept-encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 1889a1f6bb77389c70b293490c8ac679-bnk-edge1

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAm8qYTq4OOHJznC6c_32Dhua9dzhqIGx5IyM2M5Yhh5sl1ydmAAcAAADnAABGTe2zu7X6WVHnXxJYISTZAAAASofrcLTkQY6oZA6P3ShkZw Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:40 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e5f60c12e91b73492e4634d45e4511f0-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAm8qYTq4OOHJznC6c_32Dhua9dzhqIGx5IyM2M5Yhh5sl1ydmAAcAAADnAABGTe2zu7X6WVHnXxJYISTZAAAASofrcLTkQY6oZA6P3ShkZw Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 54924f4cac06c7ad0ecf7b1a3a3f2434-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAm8qYTq4OOHJznC6c_32Dhua9dzhqIGx5IyM2M5Yhh5sl1ydmAAcAAADnAABGTe2zu7X6WVHnXxJYISTZAAAASofrcLTkQY6oZA6P3ShkZw Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:40 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 0e537f2ddb69ebd6c78d6bd0eb2701f2-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge-validate	91.108.123.241		0 B
URL adss-health.com/hcdn-cgi/jschallenge-validate IP 91.108.123.241:0 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /hcdn-cgi/jschallenge-validate HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html Content-Type: application/x-www-form-urlencoded Content-Length: 74 Origin: http://adss-health.com DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAm8qYTq4OOHJznC6c_32Dhua9dzhqIGx5IyM2M5Yhh5sl1ydmAAcAAADnAABGTe2zu7X6WVHnXxJYISTZAAAASofrcLTkQY6oZA6P3ShkZw Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:43 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: hcdn=AQEAzIjsdQhgnIjeLrWZ24my8glRIFfvj9iLXhiaPtKUgCwl1ydmAAoAAADnAADTV2n-DqamjG3L-qRB4ioLAAAAKAVRwi3O_gYURqlokJOa8A; Path=/; SameSite=Lax; HttpOnly alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3182bda45e04388f049a17f03721671f-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: hcdn=AQEAzIjsdQhgnIjeLrWZ24my8glRIFfvj9iLXhiaPtKUgCwl1ydmAAoAAADnAADTV2n-DqamjG3L-qRB4ioLAAAAKAVRwi3O_gYURqlokJOa8A Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:43 GMT content-type: text/html content-length: 2193 vary: accept-encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 78c9892c4893d3da8ac61cd0bf5c06b0-bnk-edge1

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAzIjsdQhgnIjeLrWZ24my8glRIFfvj9iLXhiaPtKUgCwl1ydmAAoAAADnAADTV2n-DqamjG3L-qRB4ioLAAAAKAVRwi3O_gYURqlokJOa8A Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:43 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 91721a83a5753c049d69637b07e81bd5-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAzIjsdQhgnIjeLrWZ24my8glRIFfvj9iLXhiaPtKUgCwl1ydmAAoAAADnAADTV2n-DqamjG3L-qRB4ioLAAAAKAVRwi3O_gYURqlokJOa8A Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:43 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: abead2656173f6fee4b51473eb62b2e2-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAzIjsdQhgnIjeLrWZ24my8glRIFfvj9iLXhiaPtKUgCwl1ydmAAoAAADnAADTV2n-DqamjG3L-qRB4ioLAAAAKAVRwi3O_gYURqlokJOa8A Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:43 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3ed1fe25963491be4281696b46f0f2c9-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge-validate	91.108.123.241		0 B
URL adss-health.com/hcdn-cgi/jschallenge-validate IP 91.108.123.241:0 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /hcdn-cgi/jschallenge-validate HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html Content-Type: application/x-www-form-urlencoded Content-Length: 74 Origin: http://adss-health.com DNT: 1 Connection: keep-alive Cookie: hcdn=AQEAzIjsdQhgnIjeLrWZ24my8glRIFfvj9iLXhiaPtKUgCwl1ydmAAoAAADnAADTV2n-DqamjG3L-qRB4ioLAAAAKAVRwi3O_gYURqlokJOa8A Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:46 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: hcdn=AQEA0oB_5e40HyLVfENAbnt5haqtLzcooF-f8zfxmPKEKXEl1ydmAA0AAADnAABxFK3sUUvvbG_wZE86Dth3AAAAKldf-Dq678H7Li1H8tHhKg; Path=/; SameSite=Lax; HttpOnly alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 135f2845614055cf213ba95ca5b65479-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: hcdn=AQEA0oB_5e40HyLVfENAbnt5haqtLzcooF-f8zfxmPKEKXEl1ydmAA0AAADnAABxFK3sUUvvbG_wZE86Dth3AAAAKldf-Dq678H7Li1H8tHhKg Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:47 GMT content-type: text/html content-length: 2193 vary: accept-encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 62924b5d16b5c37edb5398f981f2aee5-bnk-edge1

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA0oB_5e40HyLVfENAbnt5haqtLzcooF-f8zfxmPKEKXEl1ydmAA0AAADnAABxFK3sUUvvbG_wZE86Dth3AAAAKldf-Dq678H7Li1H8tHhKg Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:47 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: cf25e565f33175adca3b39c018f60a47-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA0oB_5e40HyLVfENAbnt5haqtLzcooF-f8zfxmPKEKXEl1ydmAA0AAADnAABxFK3sUUvvbG_wZE86Dth3AAAAKldf-Dq678H7Li1H8tHhKg Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b95a6c4742889067a9b30d3a2776df5b-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA0oB_5e40HyLVfENAbnt5haqtLzcooF-f8zfxmPKEKXEl1ydmAA0AAADnAABxFK3sUUvvbG_wZE86Dth3AAAAKldf-Dq678H7Li1H8tHhKg Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:47 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 5d2f4313a70d0768f79314b825985f16-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge-validate	91.108.123.241		0 B
URL adss-health.com/hcdn-cgi/jschallenge-validate IP 91.108.123.241:0 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /hcdn-cgi/jschallenge-validate HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html Content-Type: application/x-www-form-urlencoded Content-Length: 74 Origin: http://adss-health.com DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA0oB_5e40HyLVfENAbnt5haqtLzcooF-f8zfxmPKEKXEl1ydmAA0AAADnAABxFK3sUUvvbG_wZE86Dth3AAAAKldf-Dq678H7Li1H8tHhKg Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:50 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: hcdn=AQEA8XVT9BNEjBhyY8NdoXy0lFlkwFk792oh5eBswNSb2j4l1ydmABEAAADnAAB3KcOOhLTP3DWIVmYMObz9AAAAeBxnhaqjdTHq2O43RTc7AA; Path=/; SameSite=Lax; HttpOnly alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 6001d5789213ba554fa28943cfaf0a0b-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.2 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.2 kB (2193 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: hcdn=AQEA8XVT9BNEjBhyY8NdoXy0lFlkwFk792oh5eBswNSb2j4l1ydmABEAAADnAAB3KcOOhLTP3DWIVmYMObz9AAAAeBxnhaqjdTHq2O43RTc7AA Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 403 Forbidden server: hcdn date: Tue, 23 Apr 2024 15:43:50 GMT content-type: text/html content-length: 2193 vary: accept-encoding content-encoding: br cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-frame-options: SAMEORIGIN cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e0e77c18118c1acc5ac606e8b53caaa1-bnk-edge1

	adss-health.com/wp-content/plugins/hot-random-image/index.html	91.108.123.241	403 Forbidden	2.4 kB
URL User Request GET HTTP/3 adss-health.com/wp-content/plugins/hot-random-image/index.html IP 91.108.123.241:443 ASN #0 Certificate IssuerLet's Encrypt Subjectadss-health.com FingerprintC5:FA:C8:81:AB:85:FF:2C:C0:B2:D4:1B:C4:49:FB:A7:61:31:7F:BB ValidityFri, 08 Mar 2024 04:34:44 GMT - Thu, 06 Jun 2024 04:34:43 GMT File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers GET /wp-content/plugins/hot-random-image/index.html HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA8XVT9BNEjBhyY8NdoXy0lFlkwFk792oh5eBswNSb2j4l1ydmABEAAADnAAB3KcOOhLTP3DWIVmYMObz9AAAAeBxnhaqjdTHq2O43RTc7AA Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:50 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 6639df5d34deffec2d14f1cb3768957c-bnk-edge2

	adss-health.com/hcdn-cgi/jschallenge	91.108.123.241	200 OK	165 B
URL GET HTTP/1.1 adss-health.com/hcdn-cgi/jschallenge IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type ASCII text Size 165 B (165 bytes) Hash 872ac06ea00f2a64fe619a6fed19e7c1 add59d8f8f035b3d3bc5f1f478b896c1f6569084 50dd4289ad422f17872ec30e17687bf66f1c5c618457bf22dcae4b7e116dfe44 HTTP Headers `GET /hcdn-cgi/jschallenge HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA8XVT9BNEjBhyY8NdoXy0lFlkwFk792oh5eBswNSb2j4l1ydmABEAAADnAAB3KcOOhLTP3DWIVmYMObz9AAAAeBxnhaqjdTHq2O43RTc7AA Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: hcdn Date: Tue, 23 Apr 2024 15:43:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 24b18acec5479bce669833d094b42027-bnk-edge2 Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Content-Encoding: gzip

	adss-health.com/favicon.ico	91.108.123.241	403 Forbidden	2.4 kB
URL GET HTTP/1.1 adss-health.com/favicon.ico IP 91.108.123.241:80 ASN #0 Requested by http://adss-health.com/wp-content/plugins/hot-random-image/index.html File type HTML document, ASCII text, with very long lines (4792), with no line terminators Size 2.4 kB (2393 bytes) Hash b649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: adss-health.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://adss-health.com/wp-content/plugins/hot-random-image/index.html DNT: 1 Connection: keep-alive Cookie: hcdn=AQEA8XVT9BNEjBhyY8NdoXy0lFlkwFk792oh5eBswNSb2j4l1ydmABEAAADnAAB3KcOOhLTP3DWIVmYMObz9AAAAeBxnhaqjdTHq2O43RTc7AA Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Server: hcdn Date: Tue, 23 Apr 2024 15:43:50 GMT Content-Type: text/html Content-Length: 2393 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3041e1281dca86b5dd1da61a20a81c1a-bnk-edge2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (4)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (34)

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate