| firefox.settings.services.mozilla.com/v1/ |  143.204.55.27 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashc9df6b36bf16969ac566c1b798362e4a e56eff34815153ae019a4bf63eb9746dd9ae2e5b 33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 15 Oct 2022 09:50:04 GMT
Expires: Sat, 15 Oct 2022 10:42:52 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cX8IHwjhJQDnhnUtDR6sZ9MrIBwZ-BfTPUWt8Hl-9dcDHxPRQQa9vg==
Age: 2221
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2b424d8c01b211c56d5b44b92e4e4153 b1fdab18f23271eee58ae1482f8af25badc2ffda 1c82a5fd2bc3f16a66becb5e1924e8c9edd39386622dc2e5ed296442f4307b2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4764
Expires: Sat, 15 Oct 2022 11:46:29 GMT
Date: Sat, 15 Oct 2022 10:27:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha57d0f62d9bd29668b94a513fa45d18e d7cb263502e21f9235b4523a596e2138d22042ec df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14857
Expires: Sat, 15 Oct 2022 14:34:42 GMT
Date: Sat, 15 Oct 2022 10:27:05 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 46zhD424+7fhP7Mn2UqmcwMtL23lWFLlM7IfSySTOFqfeEsOQrEDq2W8I2pcPptV36TWzjyMbPw=
x-amz-request-id: 0ZE8PD8FES2AAG1A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 15 Oct 2022 10:02:33 GMT
age: 1472
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 15 Oct 2022 10:27:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.27 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 15 Oct 2022 10:07:43 GMT
Expires: Sat, 15 Oct 2022 10:57:06 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LX-96v8-O7itpcxiYdq9RNMo2H2XJyTRxm9nQxwi7v9e0AVAJ44wAw==
Age: 1163
|
|
| healthpro.ai/ensl/elttarepul | 185.148.47.88 | 301 Moved Permanently | 0 B |
URL HTTP/2healthpro.ai/ensl/elttarepul IP185.148.47.88:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /ensl/elttarepul HTTP/1.1
Host: healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
referrer-policy: origin-when-cross-origin
feature-policy: accelerometer 'self'; autoplay 'self'; camera 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; payment 'self'; usb 'self'
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.healthpro.ai/ensl/elttarepul
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 15 Oct 2022 10:27:05 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash301aafc13bc66315321d9476df002258 e6bfd29899543fcd4d1b332623757bbad355306f c64315afdfcf146b16942d981588ed912650472c5e2bba7b6f8dee396d820860
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6409
Cache-Control: max-age=170798
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:06 GMT
Etag: "634a6a1f-1d7"
Expires: Mon, 17 Oct 2022 09:53:44 GMT
Last-Modified: Sat, 15 Oct 2022 08:06:55 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.210.107.213 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.210.107.213:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Xh6qdFHpuxIborW591JGLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vZzdjUS7bdYK6kWD8R+RxDlAL2c=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd446ca2d7c9a77d48cb8ec47e5f6a506 db79409c874f5336a0bbc53cc5ec00018ee18810 90474edacd2d615e4a50ff9a86a656cb3e9b91be6a6b455d607da73ab4faabd5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3802
Cache-Control: max-age=122473
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:06 GMT
Etag: "6349b789-117"
Expires: Sun, 16 Oct 2022 20:28:19 GMT
Last-Modified: Fri, 14 Oct 2022 19:24:57 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=5.7.7 |  104.17.24.14 | 200 OK | 10 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=5.7.7 IP104.17.24.14:0
File typeASCII text, with very long lines (59119) Hash14e1692fd4263ccfea0b84299bdbf1f5 7783020a9ced5f32c8d38205357c7d10798be1fd 8ff0cd2d1e7f0b6203a762fb9811256d4445a3ad0d97f07102e038ba0eb3db72
GET /ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=5.7.7 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.healthpro.ai
Connection: keep-alive
Referer: https://www.healthpro.ai/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 15 Oct 2022 10:27:06 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1405292
expires: Thu, 05 Oct 2023 10:27:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w5RZa62UgISEUX43G44P0uL9292kV3Ndw1mSXrkHuuXhp1Y84D%2Bw4XFH5hR1f%2FUH6rFtJ13Q0tkxWWHSFsru%2FxodgJYVYd%2F7fxFLfNg9SVnW3CoC%2Fkfah2w%2Flgod3uXVthw6VdCJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75a7dc409a7ab50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd446ca2d7c9a77d48cb8ec47e5f6a506 db79409c874f5336a0bbc53cc5ec00018ee18810 90474edacd2d615e4a50ff9a86a656cb3e9b91be6a6b455d607da73ab4faabd5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3803
Cache-Control: max-age=122473
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:07 GMT
Etag: "6349b789-117"
Expires: Sun, 16 Oct 2022 20:28:20 GMT
Last-Modified: Fri, 14 Oct 2022 19:24:57 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash48c8ca7abddebd077f8d5655ab885b11 1daa9bb3c1434275bbd57b9237000b72e59e1fcc 95e3c6bd5eb86b7805c5899ebd2157f214a5aec3c180830c1db3e0256097ee6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6LfJ0bcZAAAAAF7QuX9HwZLpwEYgTf9GhK__nNzC&ver=3.0 | 142.250.74.164 | 200 OK | 585 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LfJ0bcZAAAAAF7QuX9HwZLpwEYgTf9GhK__nNzC&ver=3.0 IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hash8c5145f65b6ef8fdda4dc8ce9f6c938e 459274fd4bd7ff3acaa4869a39983ea581be12d1 c60f9f5619a982883001e484618674459b5e1800508a3dbaa7f2ccef02ee8fbb
GET /recaptcha/api.js?render=6LfJ0bcZAAAAAF7QuX9HwZLpwEYgTf9GhK__nNzC&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.healthpro.ai/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 15 Oct 2022 10:27:07 GMT
date: Sat, 15 Oct 2022 10:27:07 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 | 185.148.47.88 | 200 OK | 58 kB |
URL HTTP/2www.healthpro.ai/wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (29677) Hashb5d1e2c87b60ce71c3fd90ca27073250 b65e3890ef1565f98971b344b4c85866a5f33860 2cd9de3dd26246204749cff259bc34e8e6a47ae5d6e4528b9b28c75d68d50cde
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:21:20 GMT
accept-ranges: bytes
content-length: 58171
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 | 185.148.47.88 | 200 OK | 2.7 kB |
URL HTTP/2www.healthpro.ai/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (2714), with no line terminators Hash087102ecb9f9971d052fddc91ecc63e9 7c487378bbe1f0f48daba4b006fcf55a2d1f9033 3ee638689e343730a82027d03714f274b6c665cf7e3bf60b5208a3a0cdb3581d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:21:20 GMT
accept-ranges: bytes
content-length: 2714
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 | 185.148.47.88 | 200 OK | 8.3 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (7116) Hash9c8e291a9590fb94c64f981c45968305 c6f28911c1bc65dc22a43f49283d4af2ff08e54c a5a517dcd7ee8ef045de498a1784b06744782c7a69bfaa88a91b894f95da4b88
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 20 Sep 2022 20:00:39 GMT
accept-ranges: bytes
content-length: 8259
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 | 185.148.47.88 | 200 OK | 2.7 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 IP185.148.47.88:0
Hashe6fae855021a88a0067fcc58121c594f 6299ac3987b5e81725781799dad361d19ac3b99d e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 19 May 2022 09:18:16 GMT
accept-ranges: bytes
content-length: 2731
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 | 185.148.47.88 | 200 OK | 869 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 IP185.148.47.88:0
File typeASCII text, with very long lines (826) Hashb785ea8734e1436a6f0d5e0b3b4bd8c1 18c587cee3fd14cbab5372e295e001c4d9a4c4d3 9af98e149ed5a7af3bbfe75257ddb5a7d4bc5f0be036822f89b2a1fa809fd21e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:19:37 GMT
accept-ranges: bytes
content-length: 869
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 | 185.148.47.88 | 200 OK | 245 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 IP185.148.47.88:0
Hashfb4e2445daa49dadab2bb4c5981b8fd9 b386f3da83ab16fa6c0566f4cefb6fce89e42ac2 cbdc00cbfda953b528c24dbb0bf24357f6916cc7c3602b8e8dc09f7eb777eee8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:19:37 GMT
accept-ranges: bytes
content-length: 245
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 | 185.148.47.88 | 200 OK | 60 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators Hashcdcd5bc66c5f341dbea8118b06f087dc 6319bb7556398283ebbf757eca36ebf3af09b444 7f618063d56febc293240fa3a3d8281433f248faa4045a4e076fe45b8d69e9ec
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:57:12 GMT
accept-ranges: bytes
content-length: 60289
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashbac53a9e47b402471127f290b676b367 d5aa4a8d0571a6c8519d8ab9d369c040ede52ca1 8985fb669fe4022d05158aa7a8fd8033d9b4ae4f9011f3f947e2365d4ebe19f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 10 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (9977), with no line terminators Hash93390de20e5bd77d2c57eaa162f0e929 b8b8ed893fc06ca91c8d4271dd1fe412370d53d9 9c3a92340bbef1c6f2af7f4f6637626060efb4e47a05dbf097385830bbb10ad4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 9977
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudio-elements.min.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 12 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudio-elements.min.css?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (12438), with no line terminators Hash0ff735fab7a5992c38d243f567d27913 deee86cb285eab2fe1bf7d17b006919338c2ec21 8fde2e172adb5d17159cbcc473532544712df3785794f5809c524edb8280b043
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/css/lastudio-elements.min.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 12438
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana-child/style.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 800 B |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana-child/style.css?ver=1.0.0 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (326) Hashde0bd98f00cdeb16d75adb82bbaeacd8 744225b00940d0ef58aa422858770a7d620fb4a5 63636912ac780140f6a7061211ba0d4a2aa2c25d462cd4497f2309b490ced03a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana-child/style.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 07 Nov 2019 20:36:12 GMT
accept-ranges: bytes
content-length: 800
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 | 185.148.47.88 | 200 OK | 14 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (11272) Hasheaa8641bcda2371f4024a71fbb67de3b 0e46c39d3821683c856605a82254115f9a6a7792 0c5f584d1ea2c3313dc8c55824c2a572d3cf2eae87c5ca62a58e598aec9ddb5c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 24 Feb 2021 21:13:39 GMT
accept-ranges: bytes
content-length: 14229
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 185.148.47.88 | 200 OK | 11 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP185.148.47.88:0
File typeASCII text, with very long lines (11126) Hash79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:53:12 GMT
accept-ranges: bytes
content-length: 11224
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/style.min.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 157 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/style.min.css?ver=1.0.0 IP185.148.47.88:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators Size157 kB (157380 bytes) Hash2c06887144d63aa4794ed972f6e8c672 47dd16d14faa0b1239d505305d7c35ce9661a9b6 8aaff491d64550c74d7f7b9627f3415c60bc6fd663449947a15a98756a691138
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/style.min.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 157380
content-type: text/css
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 | 185.148.47.88 | 200 OK | 999 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 IP185.148.47.88:0
File typeASCII text, with very long lines (999), with no line terminators Hash6a0e8318d42803736d2fafcc12238026 c955314a7e0a9a9871329b0f042c8f0b5df49a78 2648a1333fa24d383fd73a6beaac17156ae78f4267ff7407ad60e05a788df44c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 19 May 2022 09:18:16 GMT
accept-ranges: bytes
content-length: 999
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/plugins.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 688 B |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/plugins.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (688), with no line terminators Hash995fe76ebfcb69b29f230c89370ae178 640c68a7b49d7ce6eb939b7bf2fddc76d4cad46c 96666ff0238c31561fd9dedf714e6d716f7e9358903bcf85231ba5039a4ac964
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/plugins.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 688
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/js.cookie.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 1.8 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/js.cookie.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (1619) Hash54dfb7dc77dfc33f028fee9a7909e989 36e2cb58503f59be4ff5b0701bbd2dd34933aa68 acf5fd2ccafd1468203ef4f08a3e4c1916cf1f92cd89224bb30a24b03b1ef71c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/js.cookie.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 1785
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/wp-embed.min.js?ver=5.7.7 | 185.148.47.88 | 200 OK | 1.4 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/wp-embed.min.js?ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (1391) Hash905225d5711b559d3092387d5ffbedbd 6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d 5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/wp-embed.min.js?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 24 Feb 2021 21:13:39 GMT
accept-ranges: bytes
content-length: 1426
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/lastudio-sticky.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 3.4 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/lastudio-sticky.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (3378), with no line terminators Hash94d5f98bb2974c33646228ba15a6e21c ddef4f1efff2fef78afe0b06f34024b3f4914608 e2dd7d4393a7fd967c6e17e5940227af71275c322f94d9a0734a7f540c9ae2ca
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/lastudio-sticky.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 3378
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 | 185.148.47.88 | 200 OK | 90 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 IP185.148.47.88:0
File typeASCII text, with very long lines (65451) Hashb6f7093369a0e8b83703914ce731b13c d1889f5c173c2a4b20288f1f84758599afd346ef 60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:53:12 GMT
accept-ranges: bytes
content-length: 89496
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/modernizr-custom.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 8.3 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/modernizr-custom.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (8115) Hasha1570a8a36bc944928b1c98af2a55493 9452b90783c6619bb515305debcc933411d5e1fc d95250e3642798743855c13172561392759bd09f15d79b58be7b09811ff629e8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/modernizr-custom.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 8337
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 | 185.148.47.88 | 200 OK | 9.7 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 IP185.148.47.88:0
File typeHTML document, ASCII text, with very long lines (9720), with no line terminators Hashcfb428c02811f0cbe515d5f3dca61de6 e95f8696fbe29a706e66ccf582b36d9bd650ab9f 679e44f9b4bbbc2ad0c4000c1413fd3a88627d83f1cba8ebdac26f81bc7edb78
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 19 May 2022 09:18:16 GMT
accept-ranges: bytes
content-length: 9720
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/featherlight.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 9.2 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/featherlight.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (9194), with no line terminators Hashfb44ab9e069d301e35313565a0729b5c 2c6b707e3be34650bda5eb05c35d24f7d00877d5 3659554b808b052e2ba0ac8cbc792c1e9cb233ff910e3a6f4c0e2e1e2763f70a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/featherlight.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 9194
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/pace.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 12 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/pace.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (12415), with no line terminators Hash669c30c677a6d77ccb2ad9a852ccec12 bd9b669f8d2130fcef3572058068637dd6f127d5 eaadb9b31059c183bd2da8374d63466a9f722bdb726f5e603c38cc44323b54c0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/pace.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 12415
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/header-builder.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 17 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/header-builder.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (16854), with no line terminators Hashdd5a28d4360dd5f2fa7e14a14d2aed0c 754bb3caabd53cb779a9525d785c0280b781a636 a450fe6f9e4d48a7201fb521bbc71de287567c870dfffa8b1adc6d33b23f7ea5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/header-builder.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 16854
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 | 185.148.47.88 | 200 OK | 335 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 IP185.148.47.88:0
File typeASCII text, with very long lines (64270) Size335 kB (334809 bytes) Hash9ec30981fbcfda87c9bc1f21eedd3964 771c2ae5446a934f0ad47ada2632e8d3a253359b 901640c8d3e8ab1178f574cb9b027343a135b08c19283e183adfed11dbb012b9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:57:12 GMT
accept-ranges: bytes
content-length: 334809
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/uploads/2020/01/Orignal-Logo-File-01-e1579380120621.png | 185.148.47.88 | 200 OK | 72 kB |
URL HTTP/2www.healthpro.ai/wp-content/uploads/2020/01/Orignal-Logo-File-01-e1579380120621.png IP185.148.47.88:0
File typePNG image data, 1853 x 563, 8-bit/color RGBA, non-interlaced\012- data Hash0895967f3cb61dfad17ee5e330d84a88 c3a20bff6b47e85fb1f1188923a59bcc93da7f7a cc46898666f2f2f7f37265b214230dd15b5ae6bcc7f9c55f79fca054acd9febd
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/01/Orignal-Logo-File-01-e1579380120621.png HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 12 May 2020 03:18:06 GMT
accept-ranges: bytes
content-length: 72116
content-type: image/png
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/slick.min.js | 185.148.47.88 | 200 OK | 44 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/slick.min.js IP185.148.47.88:0
File typeASCII text, with very long lines (43724), with no line terminators Hashda0fb9e7b072e1969757e7361fb1726c 47a104247da2f8738ecfe7cf6fab3c469af9fdb8 815800f1cadf86785a85f906b8df8b029afa8641836f0cec108bf1fd37cc0292
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/slick.min.js HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 43724
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/app.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 67 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/app.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (65536), with no line terminators Hashb9472cb2571897381f2527fa5bfc42af e905f836c1ba982216a665505b1ba38fa476461b f323586e9bd0145919dccfe678ba8ad660a9822b2229d426aa169aa1b979fb79
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/app.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 66837
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 | 185.148.47.88 | 200 OK | 317 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (64398) Size317 kB (317213 bytes) Hasheb783c542cf9579993f018ed0b8bbe99 6e945a4620432f465c530080e8bff016f46042d3 208c53e8ac495229437f6586207dd40bcfcd00a8f8167c0335d0bc965841d44c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 20 Sep 2022 20:00:39 GMT
accept-ranges: bytes
content-length: 317213
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 | 185.148.47.88 | 200 OK | 503 B |
URL HTTP/2www.healthpro.ai/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 IP185.148.47.88:0
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:24:36 GMT
accept-ranges: bytes
content-length: 99310
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4835
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:27:07 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4835
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:27:07 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4835
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:27:07 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash319cbf11bba3f159e5c9f606deded924 13f29acb7a694030fc2de0b42c0d95c4be49deb7 09aa7d94e4829f4daf33d5e2aed077afcc59628839c5d6e877172e8455879062
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15855
x-amzn-requestid: 6cd31f4a-e8b2-4258-9b64-2fad83a606c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3ekFH1-IAMFTDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6346114d-5fd284f41be669a972e84ed4;Sampled=0
x-amzn-remapped-date: Wed, 12 Oct 2022 00:58:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4PfJD4ZyH4fg4H6C1kQK_MHuWp4DdzA768vaMNt98y3_hKwkFbIpYg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 05:09:16 GMT
age: 19071
etag: "13f29acb7a694030fc2de0b42c0d95c4be49deb7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4835
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:27:07 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc221dfb1-42cf-46c6-a6d8-c20dba31ed48.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc221dfb1-42cf-46c6-a6d8-c20dba31ed48.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf35b86981affbf6e27cfa4702e0bca7e 0aedda481283b3e88a73f883ecaaf01c5a015022 02bb3e05bf45885b1d52465cb6a58d9afa6dd87cf5b7a4ea55359b6ce37aad4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc221dfb1-42cf-46c6-a6d8-c20dba31ed48.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10893
x-amzn-requestid: 71fcae73-deb9-4edf-b600-960742a00e6c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZtdILHNpIAMFVaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63420f00-0c18d7c8117ad3d54c374a1a;Sampled=0
x-amzn-remapped-date: Sun, 09 Oct 2022 00:00:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TN6hKLqGXjdnXSEC_ZNxOgF2jbR2SzD-WsJXFsWN1rLc4Hk1SI-E2A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:49:43 GMT
age: 45444
etag: "0aedda481283b3e88a73f883ecaaf01c5a015022"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 | 185.148.47.88 | 200 OK | 8.1 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 IP185.148.47.88:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3ac5c50f8ffe0da11f1adb9f67d811cf 2b586d1c26208d6fe7df3a4cec286e28f21807ca 12414dcf4afa766503c9328fe626c2d1317a0d6838887e0dd30e9b56e85ea3d2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:57:12 GMT
accept-ranges: bytes
content-length: 121722
content-type: application/javascript
date: Sat, 15 Oct 2022 10:27:06 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8dd268c3-27b8-467e-bdc3-ab2dab1a3b6d.jpeg | 34.120.237.76 | 200 OK | 3.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8dd268c3-27b8-467e-bdc3-ab2dab1a3b6d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash644dadbc61528fb78d6a4d37809a4da1 46c2110541fe6eec046efea92940d17b69e410dc 6cdb2203d1ddb0e17728a5cede16bb7cf058172b0c61ca6e5082a514a447bf88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8dd268c3-27b8-467e-bdc3-ab2dab1a3b6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3894
x-amzn-requestid: f46ef5cf-34c4-4024-a1cb-7a46985a0225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aA5pWEHeoAMFkKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6349d63b-26b43ef606fd070f153225a3;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 21:35:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KZCAQXda5v816O20Q8-UKTh7nxPm0SSU1EGkNXEEharLsGzA1ifMDw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:49:43 GMT
age: 45444
etag: "46c2110541fe6eec046efea92940d17b69e410dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92a47aec-e82e-473b-bada-4a1772e28b03.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92a47aec-e82e-473b-bada-4a1772e28b03.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbed69b9cbe069db72d2b0936b20b56cf ba37c9ea8a65445bace6ac9e7b78e5cdc7052651 cd929e1f2001e0767f4b7546600cdd5fd7447a911a7e48dfe8e7fe929116f863
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92a47aec-e82e-473b-bada-4a1772e28b03.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9520
x-amzn-requestid: 4c2b73b9-592b-4f8c-b5f4-1b86fd354341
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3yJEGxJIAMF1GA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634630a0-268f77214b3061674a7818a4;Sampled=0
x-amzn-remapped-date: Wed, 12 Oct 2022 03:12:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yivRWDO4gdpplD7bgfI6pSwR8cmdCJJRrtLORqWp9rEENppkmQfcGw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 04:47:02 GMT
age: 20405
etag: "ba37c9ea8a65445bace6ac9e7b78e5cdc7052651"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg | 34.120.237.76 | 200 OK | 6.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash902f6b585d65d720ff096817ca1f2233 9b73cbeff3361c30600bea9f12a862ae2c4f1e01 8669095b4abaab1bbe1a9f65eb61e7caf713c36f8a24ed0979f482bb3356b79c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6454
x-amzn-requestid: 4774f611-4ee1-40e7-804b-229bfff6c5a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjS3MGmdoAMFqKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfe94-451518b50ab53f2538d0c13f;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 22:00:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2Ra0AP60Ts4OidLByrMWpcUixuPQZGP8QliETUca6vdyqZfO9oxGDQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:43:14 GMT
age: 45833
etag: "9b73cbeff3361c30600bea9f12a862ae2c4f1e01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioIcons.woff2 | 185.148.47.88 | 200 OK | 11 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioIcons.woff2 IP185.148.47.88:0
File typeWeb Open Font Format (Version 2), TrueType, length 10648, version 1.0\012- data Hash67288a5133d3ef3d93610f8d22292b07 fb43c7199b68edb5904bfbba3088b660db600268 fed81968cb3054aa313ffd326a83b57a14b9ab3d65216f62cc02b5b4a4ede3d3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/fonts/LaStudioIcons.woff2 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 10648
content-type: font/woff2
date: Sat, 15 Oct 2022 10:27:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashacaba5d27d27f0ebeb1a1495a6e4ff09 5953b351f69fd15de1b4d42dd9634dea8f6e920b 023cd9eaaee884f8cb91ed69805e308b42d2aaf48be2e3788e33dd95a501410f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js | 142.250.74.163 | 200 OK | 160 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (608) Size160 kB (159789 bytes) Hash1230a090d5cedcb9e764406ab9497c1b 3d175bcf4ad9957c3e32611713c01347299b173e 585cafe3d6a3b932804aaa5aeb19a650688a2c15767f513d0d60c1941475c428
GET /recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.healthpro.ai
Connection: keep-alive
Referer: https://www.healthpro.ai/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 159789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Oct 2022 16:47:25 GMT
expires: Fri, 13 Oct 2023 16:47:25 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Oct 2022 20:02:07 GMT
content-type: text/javascript
age: 149983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioBrands.woff2 | 185.148.47.88 | 200 OK | 14 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioBrands.woff2 IP185.148.47.88:0
File typeWeb Open Font Format (Version 2), TrueType, length 13524, version 1.0\012- data Hash1c4d8ecf6a969f976a8c030656fdf9e1 cff829d6409a4ced99fac5fbb2b20183c6aee796 68c4f0faa3d5eff1eb015b1e2816ff249f29335ec888e3f9d92f7ce3491d73a6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/fonts/LaStudioBrands.woff2 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 13524
content-type: font/woff2
date: Sat, 15 Oct 2022 10:27:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashacaba5d27d27f0ebeb1a1495a6e4ff09 5953b351f69fd15de1b4d42dd9634dea8f6e920b 023cd9eaaee884f8cb91ed69805e308b42d2aaf48be2e3788e33dd95a501410f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:27:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.healthpro.ai/wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-192x192.png | 185.148.47.88 | 200 OK | 7.7 kB |
URL HTTP/2www.healthpro.ai/wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-192x192.png IP185.148.47.88:0
File typePNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data Hashb6e4a1405d84d7faa609a37287dd72c3 12884b0cb36b48a9682012a2dedbe7d5e26edf6a 97f21a875ed5c6261c85ccd49a5a62f88021dfb8019ad6dc7b9170ced0d8aec2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-192x192.png HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 12 May 2020 03:18:06 GMT
accept-ranges: bytes
content-length: 7718
content-type: image/png
date: Sat, 15 Oct 2022 10:27:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-32x32.png | 185.148.47.88 | 200 OK | 844 B |
URL HTTP/2www.healthpro.ai/wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-32x32.png IP185.148.47.88:0
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data Hashefdf37915eda71a6236dd08a1c81c925 66a966015fe5e9dfc4cbad4298f584c2c2e26f04 f234fedd752d40ddfd5e76a0c6b561bdd84147376ae8b919cc680c4b304b11f9
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-32x32.png HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 12 May 2020 03:18:06 GMT
accept-ranges: bytes
content-length: 844
content-type: image/png
date: Sat, 15 Oct 2022 10:27:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-regular-400.woff2 | 104.17.24.14 | 200 OK | 13 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-regular-400.woff2 IP104.17.24.14:0
File typeWeb Open Font Format (Version 2), TrueType, length 13224, version 331.-31196\012- data Hashb91d376b8d7646d671cd820950d5f7f1 13517529affa39e2585c591acae6dc336b6aa917 e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca
GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.healthpro.ai
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Oct 2022 10:27:08 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 13224
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "613fa20b-33a8"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3656235
expires: Thu, 05 Oct 2023 10:27:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FAJX6u14ufNub2RCJ8pL3LeN%2Flaf0Aw%2Bhz529TefRWV0QX1Y%2B6UQe1IkLq8zX10CvecTlUTYtnyfg5auuO%2FtbJMroM3XUdHWGQc7BaEbxeBAl%2BEuTG7kdOO062EGmD4z97JwF2eI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75a7dc4b5951b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Oct 2022 12:31:58 GMT
expires: Sun, 08 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 597310
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 14 Oct 2022 00:48:31 GMT
expires: Sat, 14 Oct 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 121117
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/ensl/elttarepul | 185.148.47.88 | 404 Not Found | 0 B |
URL HTTP/2www.healthpro.ai/ensl/elttarepul IP185.148.47.88:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /ensl/elttarepul HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
referrer-policy: origin-when-cross-origin
feature-policy: accelerometer 'self'; autoplay 'self'; camera 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; payment 'self'; usb 'self'
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.healthpro.ai/wp-json/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
date: Sat, 15 Oct 2022 10:27:05 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-admin/admin-ajax.php?action=buttonizer&qpu=5033ae58cd32785e4ce5f6d186c0eef9&preview=0 | 185.148.47.88 | 200 OK | 0 B |
URL HTTP/2www.healthpro.ai/wp-admin/admin-ajax.php?action=buttonizer&qpu=5033ae58cd32785e4ce5f6d186c0eef9&preview=0 IP185.148.47.88:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-admin/admin-ajax.php?action=buttonizer&qpu=5033ae58cd32785e4ce5f6d186c0eef9&preview=0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/elttarepul
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=63072000; includeSubDomains
content-type: application/json; charset=UTF-8
date: Sat, 15 Oct 2022 10:27:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|