firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 18:44:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bXdm09T61l05qVKYvHFqCEMzfmwzn4HoXYdLLJtF3lCHb98ju9FH3g==
Age: 3221
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3531
Expires: Sun, 04 Sep 2022 20:36:51 GMT
Date: Sun, 04 Sep 2022 19:38:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tkm3gnfN16VzEcgRTseKRLkw6iREH_-gn2pd8NRxyRCckCv9x4yekw==
age: 66163
X-Firefox-Spdy: h2
balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
200 OK 21 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12841), with CRLF, LF line terminators
Hash 055192a81519f0eff9260169868dfc63
1969ddbaf868f8c1df6b8a55fa5b0d6dfc5902a9
959818559ee7c46c01da85ff4df236f2b043a38455614e0078d1a01b9c6e5ffd
Analyzer Verdict Alert fortinet Malware
GET /patient-resources/blog/nocturia-and-sleep-apnea HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
link: <https://balanceepigeneticorthodontics.com/wp-json/>; rel="https://api.w.org/", <https://balanceepigeneticorthodontics.com/wp-json/wp/v2/posts/5674891>; rel="alternate"; type="application/json", <https://balanceepigeneticorthodontics.com/?p=5674891>; rel=shortlink
etag: "743-1662156414;gz"
x-litespeed-cache: hit
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 20774
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:38:00 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.demandforce.com/widget/css/widget.css
301 Moved Permanently 326 B URL HTTP/1.1 www.demandforce.com/widget/css/widget.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f28f0fb9d51d8e331c51da566736f405
d6f878209c569a9f9d8af8f4cfba29bedbb3d9df
ec49c0a724212b2ae383dfc397ebcd9f00d00c062c398579f5e97f4e4deaeb63
GET /widget/css/widget.css HTTP/1.1
Host: www.demandforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Sep 2022 19:38:00 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.demandforce.com/widget/css/widget.css
Vary: Accept-Encoding
CF-Cache-Status: HIT
Expires: Sun, 04 Sep 2022 23:38:00 GMT
Cache-Control: public, max-age=14400
Server: cloudflare
CF-RAY: 74592edafcac1c0a-OSL
fonts.googleapis.com/css?family=Open+Sans%3A800i%2C800%2C700i%2C700%2C600i%2C600%2C400i%2C400%2C300i%2C300%26subset%3Dvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic&ver=1.0.0
200 OK 1.1 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans%3A800i%2C800%2C700i%2C700%2C600i%2C600%2C400i%2C400%2C300i%2C300%26subset%3Dvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic&ver=1.0.0
IP
Hash 7d5978eb65ebf46f535000aeb7b83d11
d64c84281e4ca0605a4f4cc201edd15c2328a7f7
fffe03db40fdc7db46668277add134eb4886f80caa9faf08b9ca8360908e3ebd
GET /css?family=Open+Sans%3A800i%2C800%2C700i%2C700%2C600i%2C600%2C400i%2C400%2C300i%2C300%26subset%3Dvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic%2Cvietnamese%2Clatin-ext%2Cgreek-ext%2Cgreek%2Ccyrillic-ext%2Ccyrillic&ver=1.0.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 04 Sep 2022 19:38:00 GMT
Date: Sun, 04 Sep 2022 19:38:00 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
balanceepigeneticorthodontics.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 12 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (43771)
Hash 9f76c05d4aec8a23bbb9131800060916
ba854132574f3add765c016ff6cef2a30bddc5e0
c73bcff8e403046219e8f9dfb99e029b8d58099b8c5fb5f6508127702fd1b275
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 17:40:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 11658
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1
200 OK 972 B URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1
IP
Hash e355e7e30d2cbeebefa6977790886c3a
eccf1c43237a1de702ae36722813fa10d580dd4e
49d452b612934ceb8ce12bfadb85dac2f573d458337a9ae0da76705a8ae8b018
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 17:45:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 972
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
www.demandforce.com/widget/css/widget.css
200 OK 10 kB URL HTTP/2 www.demandforce.com/widget/css/widget.css
IP
Hash 87b69eedf7b2340537fe02bd18f5e2fd
f222da253e75b85bf0d355b4273654e7d66bcf5c
fc10eac6b7d9ab3b05f6144a11d41d246994ffda5b5078c72d7eee885f375f58
GET /widget/css/widget.css HTTP/1.1
Host: www.demandforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balanceepigeneticorthodontics.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:00 GMT
content-type: text/css
content-length: 10231
last-modified: Wed, 03 Apr 2019 20:10:34 GMT
etag: "9854-585a5d8a3b4a0"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 346
expires: Sun, 04 Sep 2022 23:38:00 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 74592edbca070b02-OSL
X-Firefox-Spdy: h2
balanceepigeneticorthodontics.com/wp-content/themes/norebro-child/style.css?ver=1.2.0
200 OK 599 B URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro-child/style.css?ver=1.2.0
IP
File type ASCII text, with CRLF line terminators
Hash 44334824710c2a096a0c6b4450768edb
8a81619a9ccac4ce5aedfbeeec3c73e8a5980f6b
276dfdf512491ac744dcf02d26bdff3ced312189cc464a85a3492aca13fdee19
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro-child/style.css?ver=1.2.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Wed, 16 Feb 2022 16:31:04 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 599
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash c41f3a82e911de81a1817131069bc7d2
1e883290a0b794916cead41e5f0705716fd77b89
e9791f24770f098ea30bb4d25e2e10bdedb97132d0bbf7d2bd79eedac22efa27
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 4168
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/aos.css?ver=6.0.2
200 OK 2.2 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/aos.css?ver=6.0.2
IP
File type ASCII text, with very long lines (25948), with no line terminators
Hash 9642b2bea9f59a2e0bc7407015351335
49a874e8db68eac8f1d851b8d7e94e5866b9651e
a2dfe701e9b4a28aaab0280556d748280d14ffe19a591541858ebeab8bd737c9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/css/aos.css?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Wed, 16 Feb 2022 16:30:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 2223
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/css/fontawesome.min.css?ver=6.0.2
200 OK 13 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/css/fontawesome.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (58301)
Hash 1e10e489c37e0af53a976426df227e23
2b526479d6377d0c11e00fd6c77d736e2d07ff61
7f5ea936bfbfec4771790317284f671e76a91f2a66ebf11ad728f72ea0be93f2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/fonts/fa/css/fontawesome.min.css?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Wed, 16 Feb 2022 16:30:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 12600
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/plugins/slider-revolution/public/assets/css/rs6.css?ver=6.5.25
200 OK 12 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/plugins/slider-revolution/public/assets/css/rs6.css?ver=6.5.25
IP
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash ffb77e1068f394546172fe07f63b57e3
7f50c1c0cbfbc38933933cc8cefe40856b39d230
10a040d653c1c253bd6bc4dc3555d4fe49283f745c0a34f24c313857e2ef4b5f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/slider-revolution/public/assets/css/rs6.css?ver=6.5.25 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 17:45:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 12522
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9439a7cde73fea464c1463febdda0556
6a0030d4f26b2e9658700708c82e7ce6120ce93c
c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
balanceepigeneticorthodontics.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.4 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 9939da8da9b306b91ddc5c68ea402d66
4cd4ea5f2dcd09fec713c36cb1c1c31ace0373b5
63b97ebb1748143ca6093d63ccdb14b2748f002df4caddfaa15c1173cb2c4942
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Mon, 11 Apr 2022 17:34:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 2439
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 7.1 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash a0798e1907e23a55c0f4ffebabb1fd48
aae64554a44eb45ae03b497cacfbb56b30cedade
5eb6c2a3b9c101ee2806a07fbd9177c4480db87871bef7d6a760a26dff1bd12b
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Mon, 11 Apr 2022 17:34:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 7098
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1
200 OK 6.6 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1
IP
File type ASCII text, with very long lines (21904), with no line terminators
Hash 72ab26b100c3586766c214248da059c5
db1bae298588d6b922d5cd2090bc437fa8cc91fc
501c4ff7a416e6c08bcdaa64942b1a24904d086c9aa8367199952fe85a4352e6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 17:45:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6553
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bad6c8290b1342d0efaf4a9d2562b3cf
25a5957c3bcf66ef03e1150b089cb6f83e2e61fd
3c3ea369c691a1b184ee7ab5c9fe266adf7866e68a33aed5aa19fb4305558c37
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:38:01 GMT
Last-Modified: Sun, 04 Sep 2022 18:13:36 GMT
Server: ECS (dcb/7F5C)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bxeYzRCm-9pQJcCMLoqNFUum1B_SrRWZH2AyMEPRD7N_Fstg3BJ8fA==
Age: 5065
balanceepigeneticorthodontics.com/wp-content/themes/norebro/style.css?ver=6.0.2
200 OK 76 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/style.css?ver=6.0.2
IP
File type assembler source, ASCII text, with very long lines (867)
Hash 19c93f6594725445d67209314591373b
3858d7fed46fa4f2046bdd9a2732ee5a0a40f9fd
a94504812190a0100404d16bebb552ba5fa666b429152dbb3d694f6f97e07570
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/style.css?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:00 GMT
content-type: text/css
last-modified: Wed, 16 Feb 2022 16:30:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 75946
date: Sun, 04 Sep 2022 19:38:00 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/woocommerce-hack.js?ver=6.0.2
200 OK 2.6 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/woocommerce-hack.js?ver=6.0.2
IP
Hash b756ebe418e2b3c0520058ddd66b9893
b1a843c4975dd742fcdae043f64caf7271976ea3
76f7bcd59cd640f70257f00a85200dbc5e54f8b653719b345ff48ced0758b7e3
GET /wp-content/themes/norebro/assets/js/woocommerce-hack.js?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 2560
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 1.8 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
File type ASCII text, with very long lines (5477)
Hash 5bc847fcae1a1a6c4b7f79c00d2b7e29
b2237db0dd679c2c8e397e833f04df00d43165e7
bfa7a74e5830c0c26da7ccc50b8e44b401ce1ee8604fceb62e6c1310c47ddb2a
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Sun, 14 Jun 2020 00:23:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1831
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 7.4 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/masonry.min.js?ver=4.2.2
IP
File type ASCII text, with very long lines (23966)
Hash c64ef876a5380269bf01eee5dc898d2c
ec456158fe4cf279a2ce25a613fc97202acf2b87
6a084e003863350fb53e74d1b75d732cdfd0489a8f1b15907b406f64a40c95be
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Sun, 14 Jun 2020 00:23:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 7376
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/plugins/slider-revolution/public/assets/js/rbtools.min.js?ver=6.5.18
200 OK 49 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/plugins/slider-revolution/public/assets/js/rbtools.min.js?ver=6.5.18
IP
File type ASCII text, with very long lines (45108), with CRLF line terminators
Hash 48bb4c7f2e930b77a14a7b4b864699e9
d59f7f01e0ded74b188bf1f04dbaa0d84312325c
f12f65abd29d322e6e8ddefc6935c9fd841b1f90b7769ef0b97fea985dc816e8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/slider-revolution/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 17:45:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 48944
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b
200 OK 715 B URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b
IP
File type ASCII text, with very long lines (1626)
Hash 46cfee7a6b6ed76c0fd609b98415e886
27a59318b05327183e1b7807e2071626f4a08419
21245efcfeb0ee1d850f895f472eca45c5d471e10f03e8f10e826218be1c356a
GET /wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Fri, 19 Aug 2016 00:25:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 715
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/underscore.min.js?ver=1.13.3
200 OK 7.3 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/underscore.min.js?ver=1.13.3
IP
File type ASCII text, with very long lines (18876)
Hash 1214523626892f811a6c6c95b6a1d609
67fe6051d94251fd4038c4627095b343122f4da7
344d4af3dbc2839f51ec0ef80cfd916e92806d306535c9c1d145138a3f34a845
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 27 Apr 2022 20:09:22 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 7331
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/libs/aos.js?ver=6.0.2
200 OK 4.4 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/libs/aos.js?ver=6.0.2
IP
File type ASCII text, with very long lines (12537), with no line terminators
Hash f019306f65f7f0ad261bc292cdd031c2
66bd022c43e08bc074f2b3aef4c8e086924abe73
986fb70395a179818a0311e8492d82c93b4bdfcc0110974e24973af87f0a079d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/js/libs/aos.js?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 4353
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=6.9.0
200 OK 10 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=6.9.0
IP
File type ASCII text, with very long lines (32004)
Hash ff3e2843e4763053c3b03331405478fc
1fb3b2858ea5b5214d3fe094605a37cd8550acce
59b1fa971d986adf33fd149014b2609e50f27f33fe3feafdf6307b60635d69a4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=6.9.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 17:45:12 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9985
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/libs/jquery.mega-menu.min.js?ver=6.0.2
200 OK 4.0 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/libs/jquery.mega-menu.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (15661)
Hash f9cd000931604fc9d05d7a851a98aef2
0efc9cffbe045e966095ed0b294bcda5e743767c
3a467fd637cdfe95dc33a8c111ee8a3575a84582eab8657f52ab4c6c5b863bcc
GET /wp-content/themes/norebro/assets/js/libs/jquery.mega-menu.min.js?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3957
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/plugins/slider-revolution/public/assets/js/rs6.min.js?ver=6.5.25
200 OK 102 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/plugins/slider-revolution/public/assets/js/rs6.min.js?ver=6.5.25
IP
File type ASCII text, with very long lines (64288)
Size 102 kB (102257 bytes)
Hash 854fb0d3ae424cb2aedb9b106e00542d
64e409b0c960c0f67978f3f8725973d08f71f15b
8787aa1817eaaf083d2c32807be4b0478ba74308c207e71d2ead8e5520caddaa
GET /wp-content/plugins/slider-revolution/public/assets/js/rs6.min.js?ver=6.5.25 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 17:45:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 102257
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
ocsp.digicert.com/
200 OK 471 B IP
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6137
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:01 GMT
Last-Modified: Sun, 04 Sep 2022 17:55:44 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/navigation.js?ver=1.0.0
200 OK 1.2 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/navigation.js?ver=1.0.0
IP
Hash cdf749824266184df4443235fafc74ce
33008dfde3619bb5eda208ba1bfd3e18d8293309
29c5dea85d89c6fe6f000c347f514fa67fb765fd13747ef68c422ff830e30ed2
GET /wp-content/themes/norebro/assets/js/navigation.js?ver=1.0.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1167
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/skip-link-focus-fix.js?ver=1.0.0
200 OK 489 B URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/skip-link-focus-fix.js?ver=1.0.0
IP
Hash 0f3f620723b9e2acdc5abd4e1f2e4e71
1bf39c083fa5c5a1f0619287454076a691ea0a51
367a5a9b89b6cdc611e4eee2286c27df47a49a8a96bd5acd4326d8848a143aa8
GET /wp-content/themes/norebro/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 489
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/libs/owl.carousel.min.js?ver=6.0.2
200 OK 11 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/libs/owl.carousel.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (32000)
Hash a887cebbad63de094ca671c2c39532c8
ebf38f6f34d0c03368cc5120cebc469edc964340
471b9524213fd20d992306836cd6d74c2c8e318d78e1fb18ee6186c9322ad008
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/js/libs/owl.carousel.min.js?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 10951
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/main.js?ver=6.0.2
200 OK 20 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/js/main.js?ver=6.0.2
IP
Hash f8455331b66447563c00856bf0dd9ddd
c264bdd12b43db534479d60387cb8259005da622
28216511bf06fc814e8ee8933290b96ba699dbd35937349025ace2a4f58f0cbb
GET /wp-content/themes/norebro/assets/js/main.js?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 16 Feb 2022 16:30:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 19859
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.0 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (15660)
Hash 848f9aadf194f3d024a2a90dbd11e3b5
aecd4b03b5a7829c6ca015d926798dc95e4fa912
36ff79b2f6827e46be1df95ff739e536718c0ee4fc09462678b32d7abd60fc6c
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 11:26:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 5021
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/grid.min.css?ver=6.0.2
200 OK 1.9 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/grid.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (12282), with no line terminators
Hash b967176734b9c258af3048cae5204f82
fc2c1e9ee59f424f44000d5bdea8a3f3d176c829
1fd49e8270863d6583996d7f9761f019552ee31430880f960b2ca6e1e732fe45
GET /wp-content/themes/norebro/assets/css/grid.min.css?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: text/css
last-modified: Wed, 16 Feb 2022 16:30:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1850
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 554969c8ed0e4b5eece1261c4e1e9cd0
3b514b21c2e26b2caa15054e43ed00184a8ebc38
4a10709ca76c5112fbaf69e065b4ef93dd37bcffd4ae39b351e56d40c9322123
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: application/javascript
last-modified: Wed, 10 Mar 2021 20:37:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 30969
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/ionicons.min.css?ver=6.0.2
200 OK 8.3 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/ionicons.min.css?ver=6.0.2
IP
File type Unicode text, UTF-8 text, with very long lines (50851)
Hash b3729c58bad09d820d1d7359aa33dbd6
89c22368b74c18bd1d0c23c3329978c8381f6775
81faf8e2ad5b847e2519bf65d300d4da516c97433e7da06311545811dbdd60a5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/css/ionicons.min.css?ver=6.0.2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:01 GMT
content-type: text/css
last-modified: Wed, 16 Feb 2022 16:30:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 8262
date: Sun, 04 Sep 2022 19:38:01 GMT
server: LiteSpeed
cdn.oribi.io/Xy02NjU5MjM2NzU/oribi.js
301 Moved Permanently 183 B URL HTTP/1.1 cdn.oribi.io/Xy02NjU5MjM2NzU/oribi.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash e4e384d6672787c1bb2a9b500114f1f5
cf909e7937cd3f312c434367b732a53d7a6cbf14
80785f5520097dde3b28c617171415cd690cbf1e0353a5f3e348c83a4656ea0f
GET /Xy02NjU5MjM2NzU/oribi.js HTTP/1.1
Host: cdn.oribi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Sep 2022 19:38:01 GMT
Content-Type: text/html
Content-Length: 183
Connection: keep-alive
Location: https://cdn.oribi.io/Xy02NjU5MjM2NzU/oribi.js
X-Cache: Redirect from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HqkLMTG0rkdbw75U37by1ANwlAiLFaQrT2PPFDBPTWS_4GuvGiGPhg==
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-W27769H
404 Not Found 1.6 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W27769H
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 151f57e36ef3209fba4d8d79ba1b64cd
8adaaa7dd6bf4c6f257bf656deb83d3ea641a38f
6cb7d087e2eaf9eacf97c7d8b33deb3e7af2f2ec1f79343745a627ef91efbf44
GET /gtm.js?id=GTM-W27769H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Sun, 04 Sep 2022 19:38:01 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 79vxfYxGcq+G17N9oyL6sg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BOmMBL1gRvpqlTDRAyPHpG4ZJLI=
chimpstatic.com/mcjs-connected/js/users/35c9ceaeb5ce119bc2ce9d775/82525d81be479c7bca258a4c6.js
200 OK 50 B URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/35c9ceaeb5ce119bc2ce9d775/82525d81be479c7bca258a4c6.js
IP
Hash 104d46a3208b40e8ded389332f5a78a3
4ab55ccb2972e9a3cb62c65c97308c2450a682bb
f6e4f5edb3194334a199f0bf80b38d92a0b7388330fbce94c8c0fb2f852c171f
GET /mcjs-connected/js/users/35c9ceaeb5ce119bc2ce9d775/82525d81be479c7bca258a4c6.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: WzY2nBZyiG5g1YwCHLyWp+wqcWwBWg/Kw7kYtYbTdvyahJ4k0VCzsI37IxJ3RtDFAayS80hb+xY=
x-amz-request-id: 4AN4VBJ8FHVA3SZK
Last-Modified: Wed, 06 Mar 2019 00:07:44 GMT
ETag: "104d46a3208b40e8ded389332f5a78a3"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 50
X-EdgeConnect-MidMile-RTT: 6
X-EdgeConnect-Origin-MEX-Latency: 106
Cache-Control: max-age=1762
Expires: Sun, 04 Sep 2022 20:07:23 GMT
Date: Sun, 04 Sep 2022 19:38:01 GMT
Connection: keep-alive
cdn.oribi.io/Xy02NjU5MjM2NzU/oribi.js
200 OK 3 B URL HTTP/2 cdn.oribi.io/Xy02NjU5MjM2NzU/oribi.js
IP
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /Xy02NjU5MjM2NzU/oribi.js HTTP/1.1
Host: cdn.oribi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balanceepigeneticorthodontics.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
content-length: 3
date: Sun, 04 Sep 2022 19:38:01 GMT
cache-control: public, max-age=60
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QtNrcamE0jXT1PInRP-FuV3RQIlTy8-xSkhiZR5wKU0cCBTTov96lg==
X-Firefox-Spdy: h2
firebasestorage.googleapis.com/v0/b/deardoc-embed-codes.appspot.com/o/Balance%20Epigenetic%20Orthodontics%2FBalance%20Epigenetic%20Orthodontics%20-%20David%20Buck%2Fcode.js?alt=media&token=fc4ec38f-2fc3-4c51-a74f-84b34c7db37e
200 OK 655 B URL HTTP/2 firebasestorage.googleapis.com/v0/b/deardoc-embed-codes.appspot.com/o/Balance%20Epigenetic%20Orthodontics%2FBalance%20Epigenetic%20Orthodontics%20-%20David%20Buck%2Fcode.js?alt=media&token=fc4ec38f-2fc3-4c51-a74f-84b34c7db37e
IP
File type HTML document, ASCII text, with very long lines (655), with no line terminators
Hash 0e762e8ba569a911115f454716a4be10
dc83bacb82cbc9d3090295e789b0907cfb791264
92ead2dee9f2cfa12c30a90f4e40cea08efc2bcbe2a1de9aa296f14c90ae8e36
GET /v0/b/deardoc-embed-codes.appspot.com/o/Balance%20Epigenetic%20Orthodontics%2FBalance%20Epigenetic%20Orthodontics%20-%20David%20Buck%2Fcode.js?alt=media&token=fc4ec38f-2fc3-4c51-a74f-84b34c7db37e HTTP/1.1
Host: firebasestorage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduTTtDidYUUJ0mcqS12weBxgfHPS3kUHjypFF_XL1cau3wDTtK7LE8BrxP_-UZJZGUDwmiL-_hB2aVwkvAnwCfPDQ
expires: Sun, 04 Sep 2022 19:38:01 GMT
date: Sun, 04 Sep 2022 19:38:01 GMT
cache-control: private, max-age=0
last-modified: Wed, 01 Jun 2022 16:05:42 GMT
etag: "0e762e8ba569a911115f454716a4be10"
x-goog-generation: 1654099542556189
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 655
x-goog-meta-firebasestoragedownloadtokens: 190ca61a-0d5e-4413-abdd-15a33b1e26d6
content-type: text/javascript
content-disposition: inline; filename*=utf-8''code.js
x-goog-hash: crc32c=i8e7/w==, md5=DnYui6VpqRERX0VHFqS+EA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 655
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9439a7cde73fea464c1463febdda0556
6a0030d4f26b2e9658700708c82e7ce6120ce93c
c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dni.logmycalls.com/dni.js?app_id=CT
200 OK 22 kB URL HTTP/1.1 dni.logmycalls.com/dni.js?app_id=CT
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type exported SGML document, ASCII text
Hash 438edd978cd9e0990007349a01f09a06
1cc2db434305def6842d01ced8a52afcb9d33214
d03c2c42e00de720bed4ea33f27331d2c2248bcae878a582e1cf96d95a2f3de2
GET /dni.js?app_id=CT HTTP/1.1
Host: dni.logmycalls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
X-DNS-Prefetch-Control: off
Access-Control-Allow-Origin: *
Date: Sun, 04 Sep 2022 19:38:02 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Permitted-Cross-Domain-Policies: none
Expect-CT: max-age=0
X-XSS-Protection: 0
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
X-Powered-By: Phusion Passenger(R) 6.0.14
Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 29 Aug 2022 21:39:19 GMT
Expires: Tue, 29 Aug 2023 21:39:19 GMT
Cache-Control: public, max-age=31536000
Age: 511123
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/images/scroll-top.svg
200 OK 504 B URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/images/scroll-top.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 66c18e69f6bdb02ed50d000f267629de
b025792508454280d9f428df4f99459faff1f401
7f00bbfcb3df15fcafc9af9f331bf315faa985e2755a92222db3a1746b473fe9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/images/scroll-top.svg HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:02 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Feb 2022 16:30:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 504
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 77400, version 331.17301\012- data
Hash cac68c831145804808381a7032fdc7c2
62584b9868428fd75af3fc5ee2f9918dda428be5
1c87d2b26de7d55c66037916bbb4cba6c791da0e2adfa378332678ff13e12d9d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/fonts/fa/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/css/fontawesome.min.css?ver=6.0.2
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:02 GMT
content-type: font/woff2
last-modified: Wed, 16 Feb 2022 16:30:28 GMT
accept-ranges: bytes
content-length: 77400
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
vary: User-Agent
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301\012- data
Hash c500da19d776384ba69573ae6fe274e7
6290834672aba86d5b6c1c73b30b57c9c53996f7
cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/fonts/fa/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/fa/css/fontawesome.min.css?ver=6.0.2
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:02 GMT
content-type: font/woff2
last-modified: Wed, 16 Feb 2022 16:30:28 GMT
accept-ranges: bytes
content-length: 80148
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
vary: User-Agent
balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/ionicons/ionicons.ttf?v=2.0.0
200 OK 109 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/fonts/ionicons/ionicons.ttf?v=2.0.0
IP
File type TrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh\012- data
Size 109 kB (109188 bytes)
Hash dd0f9f2b8276e5dba2c6263792a03c56
3def20cac583e3bc367b3626608bd0f1f91aabe7
5e7ac037f8b9deedaa097a6ce952c75521cc92a5682022ff0b332227e50c9efd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/norebro/assets/fonts/ionicons/ionicons.ttf?v=2.0.0 HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/wp-content/themes/norebro/assets/css/ionicons.min.css?ver=6.0.2
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:02 GMT
content-type: font/ttf
last-modified: Wed, 16 Feb 2022 16:30:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 109188
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
balanceepigeneticorthodontics.com/wp-content/uploads/2022/08/whitelogo.png
200 OK 28 kB URL HTTP/2 balanceepigeneticorthodontics.com/wp-content/uploads/2022/08/whitelogo.png
IP
File type PNG image data, 314 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash e80710394ceadece2550850450c6a1ff
11f9e1f15604605a5784b87dd5f1cd66a7d95980
fc72418e9ccaffd6c1a45527b24ade9af1141634e8ce8438c6b350b60d0e5ffd
GET /wp-content/uploads/2022/08/whitelogo.png HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:02 GMT
content-type: image/png
last-modified: Wed, 17 Aug 2022 18:09:59 GMT
accept-ranges: bytes
content-length: 27839
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
balanceepigeneticorthodontics.com/wp-json/contact-form-7/v1/contact-forms/5/feedback/schema
200 OK 161 B URL HTTP/2 balanceepigeneticorthodontics.com/wp-json/contact-form-7/v1/contact-forms/5/feedback/schema
IP
File type JSON data\012- , ASCII text, with very long lines (391), with no line terminators
Hash 2794799320d211389ac24a10505ae6f3
3bda38400e74805fc9b26ec16228f3f4bf5d5e84
af2343d72ce8674fbc8b4b8b2cd0b3634db8086bfdb8f1677a2e9fbe3dd9d750
Analyzer Verdict Alert fortinet Malware
GET /wp-json/contact-form-7/v1/contact-forms/5/feedback/schema HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balanceepigeneticorthodontics.com/
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://balanceepigeneticorthodontics.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin,Accept-Encoding,User-Agent
etag: "3-1661722752;br"
x-litespeed-cache: hit
content-encoding: br
content-length: 161
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5fd350dfc3d8df32e8fa14f2aef35a79
8ee12debf63b4fef31251a4659133018abf50299
100c7e362ffd77297276a0c71d7c661c3d8556f592a49e93344791fac75a1b8f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:38:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 09:46:08 GMT
Expires: Sun, 11 Sep 2022 09:46:07 GMT
Etag: "8ee12debf63b4fef31251a4659133018abf50299"
Cache-Control: max-age=568684,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74592ee6ce5ab512-OSL
balanceepigeneticorthodontics.com/wp-json/contact-form-7/v1/contact-forms/5/feedback/schema
304 Not Modified 0 B URL HTTP/2 balanceepigeneticorthodontics.com/wp-json/contact-form-7/v1/contact-forms/5/feedback/schema
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /wp-json/contact-form-7/v1/contact-forms/5/feedback/schema HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balanceepigeneticorthodontics.com/
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-None-Match: "3-1661722752;br"
TE: trailers
HTTP/2 304 Not Modified
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://balanceepigeneticorthodontics.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin,User-Agent
etag: "3-1661722752;br"
x-litespeed-cache: hit
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5688
Expires: Sun, 04 Sep 2022 21:12:50 GMT
Date: Sun, 04 Sep 2022 19:38:02 GMT
Connection: keep-alive
api.ipify.org/?format=json&
200 OK 21 B URL HTTP/1.1 api.ipify.org/?format=json&
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7d69c71af0f191e9a72db6153f8018d1
f67c5f2887bc05654b47f76e9621e53a4091aed1
5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65
GET /?format=json& HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: http://balanceepigeneticorthodontics.com
Content-Type: application/json
Vary: Origin
Date: Sun, 04 Sep 2022 19:38:02 GMT
Content-Length: 21
Via: 1.1 vegur
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5688
Expires: Sun, 04 Sep 2022 21:12:50 GMT
Date: Sun, 04 Sep 2022 19:38:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5688
Expires: Sun, 04 Sep 2022 21:12:50 GMT
Date: Sun, 04 Sep 2022 19:38:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5688
Expires: Sun, 04 Sep 2022 21:12:50 GMT
Date: Sun, 04 Sep 2022 19:38:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0eecb70391b63b662d13355e32d95ea1
5d5c724e26af57967b9a132a77d3986ba8d6ed9c
2c7f2aa1c725a5d39daf44ee746bb24b5c15aab41c67cf160814f7f87d1aacdf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8931
x-amzn-requestid: cfc0940f-ad6a-4535-91b7-70b200af68d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwGEVEoAMFriw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-5b6e6e5e3401eba533fb63df;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aa71ssSsXM8Z0Q2V4AitycF3hefEZXNqIYsr0vsJyhpE9cDpNEwh6Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:14:56 GMT
age: 76986
etag: "5d5c724e26af57967b9a132a77d3986ba8d6ed9c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oU-qOKW_Jy8MV0HLQWofKsOi_qseUcyZRoP5LoyLsCclpCgf6NHiBA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:02:43 GMT
age: 77719
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:41 GMT
age: 78381
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wd9SF3txQNTVUaSPcKQ_nQfPt1pBjFbuHzSZiQjfbGBSb-i7J8Rgjg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:44:29 GMT
age: 78813
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s0voKdiDdj0mq8-VRFSWcYcQXaWti7929bpdKSQMWDoVCmOAPepuDg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:57 GMT
age: 56945
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
balanceepigeneticorthodontics.com/wp-content/uploads/2022/08/DSCN1763-min.jpg
200 OK 124 kB URL HTTP/2 balanceepigeneticorthodontics.com/wp-content/uploads/2022/08/DSCN1763-min.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x900, components 3\012- data
Size 124 kB (123921 bytes)
Hash 1ff8bcf6e0bc1799779ef073327e24d4
6f5aae0586da2de9cc8dbcc4cce814bdb5a23661
cbd0740844190a6dab6aa3eff628b6ed4c883b0ccb8d0f32146e17126829ee09
GET /wp-content/uploads/2022/08/DSCN1763-min.jpg HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 19:38:02 GMT
content-type: image/jpeg
last-modified: Wed, 17 Aug 2022 17:47:06 GMT
accept-ranges: bytes
content-length: 123921
date: Sun, 04 Sep 2022 19:38:02 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-501217.js?sv=5
301 Moved Permanently 183 B URL HTTP/1.1 static.hotjar.com/c/hotjar-501217.js?sv=5
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash e4e384d6672787c1bb2a9b500114f1f5
cf909e7937cd3f312c434367b732a53d7a6cbf14
80785f5520097dde3b28c617171415cd690cbf1e0353a5f3e348c83a4656ea0f
GET /c/hotjar-501217.js?sv=5 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Sep 2022 19:38:03 GMT
Content-Type: text/html
Content-Length: 183
Connection: keep-alive
Location: https://static.hotjar.com/c/hotjar-501217.js?sv=5
X-Cache: Redirect from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6G1gBkeWqcddwd8-U5la7GFLY9e7c0iW7bxEBMhcQAi1kGUcUcZmHA==
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:54:46 GMT
age: 78197
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20006
Date: Sun, 04 Sep 2022 18:20:37 GMT
Expires: Sun, 04 Sep 2022 20:20:37 GMT
Cache-Control: public, max-age=7200
Age: 4646
Last-Modified: Wed, 13 Apr 2022 21:02:38 GMT
Content-Type: text/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash 6429b930abfde63299f0904d2799142e
7a33a6893301f185e5de5e038574da5e56a3fb6d
2e66f86cab83f1b68b77449fea4c92103f1d850f3da21af5295c3ec75889520a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3834
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:03 GMT
Last-Modified: Sun, 04 Sep 2022 18:34:09 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 04 Sep 2022 18:29:41 GMT
expires: Sun, 04 Sep 2022 20:29:41 GMT
cache-control: public, max-age=7200
age: 4102
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b291ba86fd8ccc4e7b6cee355e22114
fd54e165ca2046591c7185132dc5e86df69ab4f2
4e3d80e4325a12aac90231d9a008b9064e4a6c79dc20454c0daaae10990e4af7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 53e4933126779cbf269a5819d467ad4b
1c3c6b27a0660a44717be304d90834cf2f9cf3ce
ed5ad968f7d95b37c817e86b54062702bef60b1ffd3977248aad23072af06b87
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: uZrnJ1EAGZLSGuccCckvsD+GnTqld/+6CeFYRH2Eza/fbqS63VQOKWHFTRsKm2nBzZvjxgLtdthSRAoJqK66ew==
content-length: 26752
x-fb-trip-id: 1904183273
date: Sun, 04 Sep 2022 19:38:03 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6429b930abfde63299f0904d2799142e
7a33a6893301f185e5de5e038574da5e56a3fb6d
2e66f86cab83f1b68b77449fea4c92103f1d850f3da21af5295c3ec75889520a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3834
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:03 GMT
Last-Modified: Sun, 04 Sep 2022 18:34:09 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
balanceepigeneticorthodontics.com/favicon.ico
404 Not Found 1.2 kB URL HTTP/1.1 balanceepigeneticorthodontics.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /favicon.ico HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/patient-resources/blog/nocturia-and-sleep-apnea
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Sun, 04 Sep 2022 19:38:03 GMT
server: LiteSpeed
vary: User-Agent
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d3fb0ec092a8b741a97df21fc139e50c
e17f9f905521a6cb0cd109239178c0a7dfca0e11
7f1e832f7c6bef3a94a8582afc80ca00f796323ea1abd77cc94ab52d7378f759
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 74
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Sep 2022 19:38:03 GMT
Content-Type: application/ocsp-response
Content-Length: 1776
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 04 Sep 2022 08:52:30 GMT
Expires: Mon, 05 Sep 2022 08:52:30 GMT
ETag: "e17f9f905521a6cb0cd109239178c0a7dfca0e11"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dni.logmycalls.com/load_dni?ref=&code=264b04062f16e0a09354779b624c1eff&host=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&browser=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ip_host=91.90.42.154&is_dni=&app_host=dni.logmycalls.com&elements=&
200 OK 568 B URL HTTP/1.1 dni.logmycalls.com/load_dni?ref=&code=264b04062f16e0a09354779b624c1eff&host=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&browser=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ip_host=91.90.42.154&is_dni=&app_host=dni.logmycalls.com&elements=&
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text, with very long lines (568), with no line terminators
Hash 438f7ad3b054f73259911de4b04cc590
bf8afb2afca453553370b51434910c7ec17af139
65f1efe1d4d62264181582544e0b536de98dc6ef289b055a8beafceadcc75f50
GET /load_dni?ref=&code=264b04062f16e0a09354779b624c1eff&host=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&browser=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ip_host=91.90.42.154&is_dni=&app_host=dni.logmycalls.com&elements=& HTTP/1.1
Host: dni.logmycalls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 568
Connection: keep-alive
Status: 200 OK
X-DNS-Prefetch-Control: off
Access-Control-Allow-Origin: *
Date: Sun, 04 Sep 2022 19:38:03 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Permitted-Cross-Domain-Policies: none
Expect-CT: max-age=0
X-XSS-Protection: 0
X-Download-Options: noopen
ETag: W/"238-v4r7KvykU1UzcLUUNJEMfsF68Tk"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
X-Powered-By: Phusion Passenger(R) 6.0.14
Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
lh4.googleusercontent.com/pZQ3-k4-0qRwFa20fLbBj2dlbCTOPhrYRugwnlbeppcrdrvPJc9nSAS2ifisuuFdTkOaL0gsPtOTAlhdKvHtmbqTxBjr-3bEuSlm6ZjInqDd3x31G8oMoZF-MwveNGFwrrog-ZC0YyY32I6eo22RPA
200 OK 403 kB URL HTTP/2 lh4.googleusercontent.com/pZQ3-k4-0qRwFa20fLbBj2dlbCTOPhrYRugwnlbeppcrdrvPJc9nSAS2ifisuuFdTkOaL0gsPtOTAlhdKvHtmbqTxBjr-3bEuSlm6ZjInqDd3x31G8oMoZF-MwveNGFwrrog-ZC0YyY32I6eo22RPA
IP
File type PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 403 kB (402719 bytes)
Hash 7c27a941426fa7d18799e7f56a043c40
bb1c5bb7840e5f14259339dfb3b8e676db1ad40b
da8bd1b6df8a79fc229cdfb0066156c97063df635dc80332615979338015a876
GET /pZQ3-k4-0qRwFa20fLbBj2dlbCTOPhrYRugwnlbeppcrdrvPJc9nSAS2ifisuuFdTkOaL0gsPtOTAlhdKvHtmbqTxBjr-3bEuSlm6ZjInqDd3x31G8oMoZF-MwveNGFwrrog-ZC0YyY32I6eo22RPA HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Mon, 05 Sep 2022 19:38:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:38:03 GMT
server: fife
content-length: 402719
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b291ba86fd8ccc4e7b6cee355e22114
fd54e165ca2046591c7185132dc5e86df69ab4f2
4e3d80e4325a12aac90231d9a008b9064e4a6c79dc20454c0daaae10990e4af7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:38:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dni.logmycalls.com/save_log?0=&1=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&2=91.90.42.154&3=Firefox%2F96.0%20(x86_64%3B%20Linux)&4=null&5=1f7e6132-ed97-4f06-b60d-24fa6faaacd7&6=16317&
200 OK 86 kB URL HTTP/1.1 dni.logmycalls.com/save_log?0=&1=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&2=91.90.42.154&3=Firefox%2F96.0%20(x86_64%3B%20Linux)&4=null&5=1f7e6132-ed97-4f06-b60d-24fa6faaacd7&6=16317&
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type gzip compressed data, from Unix\012- data
Hash f93ea106ce3544e45ac71458f0075bfb
2bfaca10ae513e40a76fe8c32b1a5c96b08e96c0
8c635075111473a5443245aa937611dab06dda4520caf2448c01623f56517ed5
GET /save_log?0=&1=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&2=91.90.42.154&3=Firefox%2F96.0%20(x86_64%3B%20Linux)&4=null&5=1f7e6132-ed97-4f06-b60d-24fa6faaacd7&6=16317& HTTP/1.1
Host: dni.logmycalls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 22
Connection: keep-alive
Status: 200 OK
X-DNS-Prefetch-Control: off
Access-Control-Allow-Origin: *
Date: Sun, 04 Sep 2022 19:38:03 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Permitted-Cross-Domain-Policies: none
Expect-CT: max-age=0
X-XSS-Protection: 0
X-Download-Options: noopen
ETag: W/"16-TDVoIiIjaXlOy1aPCRll+lZ3Ono"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
X-Powered-By: Phusion Passenger(R) 6.0.14
Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
www.facebook.com/tr/?id=265755707253993&ev=PageView&dl=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&rl=&if=false&ts=1662320279702&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662320279701.273787224&it=1662320279424&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=265755707253993&ev=PageView&dl=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&rl=&if=false&ts=1662320279702&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662320279701.273787224&it=1662320279424&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=265755707253993&ev=PageView&dl=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&rl=&if=false&ts=1662320279702&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662320279701.273787224&it=1662320279424&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 04 Sep 2022 19:38:03 GMT
expires: Sun, 04 Sep 2022 19:38:03 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.userway.org/widget.js
200 OK 598 B URL HTTP/2 cdn.userway.org/widget.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (1317), with no line terminators
Hash 2f5ab6d2b6e8a5ae1bb4250019859734
a7feb1037a3109bf4f6c512b85f7956d4ad67d76
ae3955f98ebe1239849d1a4995318bd5b727a3ff188ff3d8025b871d8481c6bc
GET /widget.js HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:03 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Fri, 02 Sep 2022 16:48:47 GMT
etag: W/"e6b7681ff499ae4db6b2e01d902eeca2"
cache-control: max-age=3600, public
vary: Accept-Encoding
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: Jy7liGUtkjQJqFnJJJNKXq7U6-qlefhbXs0uTmO3aZPtv-dpx2Mopg==
age: 1773
x-accel-expires: @1662322887
server: CDN77-Turbo
x-77-nzt: AblMCRQRIK7/5AMAAA
x-77-nzt-ray: 2F4By6llpDo
x-cache: HIT
x-age: 996
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 630ae02011a6d04fd737e7f799231046
d66174cd1c87448f0aae89051b4365e4198e04d3
f4131508bc6593d241e41dd2c1c9f1ccebc2fb553847b7ca343b00c3cc17563b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:38:03 GMT
Last-Modified: Sun, 04 Sep 2022 18:10:45 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iOilmog2DH0FRg-0vx5gcyrGrAbOylt8dFPIP93N2kPthLduiP-XSg==
Age: 5238
balanceepigeneticorthodontics.com/wp-json/contact-form-7/v1/contact-forms/5/refill
304 Not Modified 0 B URL HTTP/2 balanceepigeneticorthodontics.com/wp-json/contact-form-7/v1/contact-forms/5/refill
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /wp-json/contact-form-7/v1/contact-forms/5/refill HTTP/1.1
Host: balanceepigeneticorthodontics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balanceepigeneticorthodontics.com/
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-None-Match: "5-1661722752;br"
TE: trailers
HTTP/2 304 Not Modified
content-type: application/json; charset=UTF-8
x-robots-tag: noindex
link: <https://balanceepigeneticorthodontics.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin,User-Agent
etag: "5-1661722752;br"
x-litespeed-cache: hit
date: Sun, 04 Sep 2022 19:38:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 852ec01091223bcd1aa676a97eab0dad
627f0b9a018efe770e2acb78e0d7e91f3364c8b4
7aee48fc0081776852a6b0d53ee4df731d760ce817a87c41d7e625f7c48a9cc9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:38:04 GMT
Last-Modified: Sun, 04 Sep 2022 18:45:37 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FC1bMmvGwTuhbivGmsjFcMOLxHMd0Sb8IqNHNmm2jTDkNBZqfxBKCQ==
Age: 3147
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fcc2b13964f4ecc7d3e81b8f0a01bd59
beed0eb617977a66abd78f6c52615153c764c3c2
cc2b63ca16ac68dd082273aa39d4dae735e2a38e29929a638fea8813931ae644
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:38:04 GMT
Last-Modified: Sun, 04 Sep 2022 18:30:31 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ifgIilWl6_DU3Pvvt-gelvqCWiBXNl6tT8o7wb-KiYqQrsXPxyHgQg==
Age: 4054
media.botsrv2.com/control/img/400x300/93/c1e19f76f943049d5f9db92530cb0a/blob.png
200 OK 156 kB URL HTTP/2 media.botsrv2.com/control/img/400x300/93/c1e19f76f943049d5f9db92530cb0a/blob.png
IP
File type PNG image data, 338 x 300, 8-bit/color RGB, non-interlaced\012- data
Size 156 kB (155774 bytes)
Hash 13c7cdeb96445af9b21fc3d563810a5b
d78422f990e423c74a4b99634da60a94e7a57c20
260c89db1e7e6cf195b1ae2b70aee96f09c9639bd824db1ae7d7369f75dac7fc
GET /control/img/400x300/93/c1e19f76f943049d5f9db92530cb0a/blob.png HTTP/1.1
Host: media.botsrv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 155774
date: Wed, 13 Jul 2022 06:06:19 GMT
last-modified: Tue, 12 Jan 2021 15:17:39 GMT
etag: "13c7cdeb96445af9b21fc3d563810a5b"
cache-control: max-age=31536000
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1uOsBfhMsv734KnHWBZOB1pVnCOnfwXFXb1Ya2CO3Et-EM7_RC1XBg==
age: 4627906
vary: Access-Control-Request-Headers,Access-Control-Request-Method, Origin
X-Firefox-Spdy: h2
api.userway.org/api/tunings/YYMGs8sZYe
200 OK 1.3 kB URL HTTP/2 api.userway.org/api/tunings/YYMGs8sZYe
IP
File type JSON data\012- , ASCII text, with very long lines (1322), with no line terminators
Hash 77d09aedcd2ccba99abf4623292429fc
b3944dab7db2c78e8ccea11a85acaf46ac341c13
9c1358e44934111b62fed7c71da3af18a5953d3996c191f1b6b9e4fbea6a7462
POST /api/tunings/YYMGs8sZYe HTTP/1.1
Host: api.userway.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1566
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:04 GMT
content-type: application/json; charset=utf-8
content-length: 1322
x-service-version: uw-pr
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, PATCH, POST, DELETE
access-control-allow-headers: *
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
etag: W/"52a-s5RNq32yx46MzqEahayvRqw0HBM"
X-Firefox-Spdy: h2
dni.logmycalls.com/update_session_last_used?dni_id=1f7e6132-ed97-4f06-b60d-24fa6faaacd7&number_to_display=&host=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&client_id=1848589425.1662320279&custom_parameter=&
200 OK 20 B URL HTTP/1.1 dni.logmycalls.com/update_session_last_used?dni_id=1f7e6132-ed97-4f06-b60d-24fa6faaacd7&number_to_display=&host=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&client_id=1848589425.1662320279&custom_parameter=&
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text, with no line terminators
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
GET /update_session_last_used?dni_id=1f7e6132-ed97-4f06-b60d-24fa6faaacd7&number_to_display=&host=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&client_id=1848589425.1662320279&custom_parameter=& HTTP/1.1
Host: dni.logmycalls.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 20
Connection: keep-alive
Status: 200 OK
X-DNS-Prefetch-Control: off
Access-Control-Allow-Origin: *
Date: Sun, 04 Sep 2022 19:38:06 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Permitted-Cross-Domain-Policies: none
Expect-CT: max-age=0
X-XSS-Protection: 0
X-Download-Options: noopen
ETag: W/"14-Y53wuE/mmbSikKcT/WualL1N65U"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
X-Powered-By: Phusion Passenger(R) 6.0.14
Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
cdn.userway.org/widgetapp/images/wheel_right_wh.svg
200 OK 0 B URL HTTP/2 cdn.userway.org/widgetapp/images/wheel_right_wh.svg
IP
ASN #60068 Datacamp Limited
GET /widgetapp/images/wheel_right_wh.svg HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:04 GMT
content-type: image/svg+xml
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Sun, 17 Jul 2022 17:46:41 GMT
etag: W/"4471efd520fd01abf13415c6253d668e"
cache-control: max-age=25920000, public
via: 1.1 bfd79d6123e7d49fe3019b17aabecba4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: lRPwfqxem-kVe3-utw59c1HrFxXJcK72IRTDA5PJf59-jU5Js9EMBw==
age: 8
x-accel-expires: @1684925418
server: CDN77-Turbo
x-77-nzt: AblMCRSb8YT/spQyAA
x-77-nzt-ray: aZ52uLITCn4
x-cache: HIT
x-age: 3314866
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.userway.org/widgetapp/images/spin_wh.svg
200 OK 0 B URL HTTP/2 cdn.userway.org/widgetapp/images/spin_wh.svg
IP
ASN #60068 Datacamp Limited
GET /widgetapp/images/spin_wh.svg HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:04 GMT
content-type: image/svg+xml
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Sun, 17 Jul 2022 17:46:41 GMT
etag: W/"8e0a35946bf39d10f46a1f1653366a0a"
cache-control: max-age=25920000, public
vary: Accept-Encoding
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: lAUP38tVWdkEaKMN0jNo7oVr-e_8p01uJ1rANqQe2aHnd793VLY--w==
age: 5
x-accel-expires: @1684925415
server: CDN77-Turbo
x-77-nzt: AblMCRQm7tr/tZQyAA
x-77-nzt-ray: dSRj4UOc9LQ
x-cache: HIT
x-age: 3314869
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-501217.js?sv=5
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-501217.js?sv=5
IP
GET /c/hotjar-501217.js?sv=5 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balanceepigeneticorthodontics.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Sun, 04 Sep 2022 19:38:03 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/ead1086f29a17ba22a95b8b877fc2758
strict-transport-security: max-age=86400; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cO0xKK22vvCM-4dZRooQk_IXAuiIBSuVX5d_XFu-c1WOryhnAuu_wQ==
X-Firefox-Spdy: h2
botsrv.com/qb/data2/DYRAQrGYeKbW05dx/MqLdPEng2Kb6RWpJ?qbReferer=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&qbVersion=1662320279907
200 OK 0 B URL HTTP/2 botsrv.com/qb/data2/DYRAQrGYeKbW05dx/MqLdPEng2Kb6RWpJ?qbReferer=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&qbVersion=1662320279907
IP
GET /qb/data2/DYRAQrGYeKbW05dx/MqLdPEng2Kb6RWpJ?qbReferer=http%3A%2F%2Fbalanceepigeneticorthodontics.com%2Fpatient-resources%2Fblog%2Fnocturia-and-sleep-apnea&qbVersion=1662320279907 HTTP/1.1
Host: botsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:03 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: http://balanceepigeneticorthodontics.com
access-control-allow-credentials: true
content-security-policy: default-src * blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; frame-src *; style-src 'self' 'unsafe-inline' * blob:; frame-ancestors *
x-dns-prefetch-control: off
strict-transport-security: max-age=63072000; preload
x-download-options: noopen
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
x-xss-protection: 1; mode=block
set-cookie: qb.A={"balanceepigeneticorthodontics.com.MqLdPEng2Kb6RWpJ":{"visit_count":1}}; path=/; expires=Wed, 04 Sep 2024 19:38:03 GMT; samesite=none; secure; httponly
qb.A.sig=OtDlgWHmKG2_VrEQMXMSzncJ9nA; path=/; expires=Wed, 04 Sep 2024 19:38:03 GMT; samesite=none; secure; httponly
cache-control: max-age=31536000
expires: Mon, 04 Sep 2023 19:38:03 GMT
last-modified: Sun, 04 Sep 2022 19:38:03 GMT
x-cached: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.userway.org/widgetapp/2022-09-02/widget_app_base_1662137132807.js
200 OK 0 B URL HTTP/2 cdn.userway.org/widgetapp/2022-09-02/widget_app_base_1662137132807.js
IP
ASN #60068 Datacamp Limited
GET /widgetapp/2022-09-02/widget_app_base_1662137132807.js HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:38:03 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Fri, 02 Sep 2022 16:48:44 GMT
etag: W/"ce8e17dd4bd442284563d9e3d9513b93"
cache-control: max-age=25920000, public
vary: Accept-Encoding
via: 1.1 c7b77c915dff1aaf04e31040a3e9f3ec.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: FY7Mawfkeo2LwKKebdvWDAkxasC3TGqnhOqSywYHXeHdfd36ARdmyA==
age: 317
x-accel-expires: @1688057769
server: CDN77-Turbo
x-77-nzt: AblMCRTOobT/8sgCAA
x-77-nzt-ray: 8DWTtgiayhM
x-cache: HIT
x-age: 182514
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
static.ai.getdeardoc.com/website/js/widget2.90b5a0ff.js
200 OK 0 B URL HTTP/2 static.ai.getdeardoc.com/website/js/widget2.90b5a0ff.js
IP
GET /website/js/widget2.90b5a0ff.js HTTP/1.1
Host: static.ai.getdeardoc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 29 Jun 2022 15:11:13 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Mon, 27 Sep 2021 19:16:00 GMT
etag: W/"6f94c378b397a2e5b7624a8a84aa07c6"
cache-control: max-age=31536000
x-amz-version-id: ug5rxut924nW6xl37o5nSKKsrF67pAm2
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oWLyDwTVK2zyyDa597eWRU5KPSfCB3tVHYZAz9s6ZgDVASUKHUxgdg==
age: 5804809
X-Firefox-Spdy: h2
static.botsrv2.com/website/css/widget.ddbdd5c6.min.css
200 OK 0 B URL HTTP/2 static.botsrv2.com/website/css/widget.ddbdd5c6.min.css
IP
GET /website/css/widget.ddbdd5c6.min.css HTTP/1.1
Host: static.botsrv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://balanceepigeneticorthodontics.com
Connection: keep-alive
Referer: http://balanceepigeneticorthodontics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Thu, 04 Aug 2022 05:04:13 GMT
last-modified: Thu, 04 Aug 2022 04:30:51 GMT
etag: W/"3f84d0378ee533c011943bd04e319353"
cache-control: max-age=31536000
x-amz-version-id: GACFiGF011wCXs4cvKCZ.IUgViDt8KKE
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zpjWQovu_JxSfeFs8SOZ2miafFmRs96SapaPrG37Xkf_vhLgIdpHQg==
age: 2730832
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
45.79.7.19
185.76.9.24
23.36.76.249
52.51.216.208
93.184.220.29
104.18.39.69