r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6425
Expires: Wed, 28 Sep 2022 04:03:14 GMT
Date: Wed, 28 Sep 2022 02:16:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 02:15:37 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j-tf0JkdlwAElpu8FrjYVupLPAUSVlv_6t7ySLPJBdJZxzaJS4oY7Q==
Age: 32
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dT53xtFCO2KY2g8DcF9jdj3uVHaVxwyrCDsQ692JY7ZemcwxLwkXnA==
age: 60716
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 02:16:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
reportmedicalnegligence.com/
162.215.240.160200 OK 17 kB URL HTTP/1.1 reportmedicalnegligence.com/
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4124), with CRLF, LF line terminators
Hash 7b8c7c24b3efef84c7547fca5957062d
001ecc450de07f4f3f36c7464138cbccc9fbcf89
b239f0a61c7255e1eac9eae9e1f7fab24b29464c3804f21df9c52fc7fdf3a8f7
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:09 GMT
Server: Apache
Link: <http://reportmedicalnegligence.com/wp-json/>; rel="https://api.w.org/", <http://reportmedicalnegligence.com/>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16654
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
fonts.googleapis.com/css?family=Source+Sans+Pro&ver=4.9.21
142.250.74.10200 OK 536 B URL HTTP/1.1 fonts.googleapis.com/css?family=Source+Sans+Pro&ver=4.9.21
IP 142.250.74.10:0
Hash 7bd09da53c3303542148d60d46a1571d
52794c397cff52d989bb4910435c7aa1aa9bee73
1290f4086698603567f539ef5b4d4e96f2f7107f483807a4804cbf18bf9db6b1
GET /css?family=Source+Sans+Pro&ver=4.9.21 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 28 Sep 2022 02:16:09 GMT
Date: Wed, 28 Sep 2022 02:16:09 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
reportmedicalnegligence.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.1
162.215.240.160409 Conflict 83 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.1
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.1 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:09 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 28 Sep 2022 02:10:46 GMT
Expires: Wed, 28 Sep 2022 02:12:27 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pBbtro3kYBN-z7_Wd0RE-_Ha7OTteJkcaIeT4BcLCwAFEe18LDlXqQ==
Age: 324
reportmedicalnegligence.com/wp-content/plugins/siteorigin-panels/css/front-flex.css?ver=2.5.16
162.215.240.160200 OK 407 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/siteorigin-panels/css/front-flex.css?ver=2.5.16
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash a64a142e3557735e65075977da205f50
e3c17b516df1c3f8b000de9c91d26df56cbea59d
186c852381de148ff006ca500a7b883a1b7e26bee3e78a4027714dbfd93e68ff
GET /wp-content/plugins/siteorigin-panels/css/front-flex.css?ver=2.5.16 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 10 Dec 2017 18:31:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 407
Keep-Alive: timeout=5, max=75
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/modula-best-grid-gallery/scripts/effects.css?ver=1.1.13
162.215.240.160200 OK 713 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/modula-best-grid-gallery/scripts/effects.css?ver=1.1.13
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 7ad20f777ae629cde0b999703812eda0
4d6e5a332db4ecd2f6ec72c6630e05551b694c4f
ad076a58d0db44de9771d8109bacf57a6d4ac5b4788974e6636d0bf2dcf3bb5f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/modula-best-grid-gallery/scripts/effects.css?ver=1.1.13 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 10 Aug 2017 16:25:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 713
Keep-Alive: timeout=5, max=75
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/style.css?ver=1.11.2
162.215.240.160200 OK 1.2 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/style.css?ver=1.11.2
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash be0585f2f1ad74bc8ec5dbadb4f91308
a516db90c500b684cffaf10fa5ba58d15a949720
0ae5c1b1d3fa0558fa59bcaf17557151e7f6a870131c20273b3eda05384617fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/style.css?ver=1.11.2 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 10 Dec 2017 18:33:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1219
Keep-Alive: timeout=5, max=75
Content-Type: text/css
reportmedicalnegligence.com/wp-content/themes/allegiant/core/css/base.css?ver=4.9.21
162.215.240.160200 OK 12 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/core/css/base.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1457), with CRLF line terminators
Hash 72556672cf2780e26c95e28ec15bae0b
460609b2937afed9a4a1a2da0bcce17d37699bb2
2ba19a297473f6ae3d74167d4a4849e642d05a0b089d1c01c689e705c7096306
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/allegiant/core/css/base.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 10 Aug 2017 16:23:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12041
Keep-Alive: timeout=5, max=75
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/super-socializer/css/share-svg.css?ver=7.9.5
162.215.240.160200 OK 44 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/super-socializer/css/share-svg.css?ver=7.9.5
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (42901)
Hash abc6a3d049f2b692b8b040fb256ab746
de013aea5daf986b9614ce38d960c31195573cc8
2bcb9a565b38f6c1f1a6fe3c1dc9ea2fd9c388dae8cc0057f3cde82d4359c99a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/super-socializer/css/share-svg.css?ver=7.9.5 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sat, 02 Dec 2017 07:29:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/modula-best-grid-gallery/scripts/modula.css?ver=4.9.21
162.215.240.160200 OK 1.1 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/modula-best-grid-gallery/scripts/modula.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 70cde8ff1abdc34e1f8e281142e7caa7
21f45e15712aa62f3fb6f724ea84355eaa7cb4db
7c8fe07bade2179aa6a57bd9c5b161487e374a84e87f87483cd34ef60f099d3d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/modula-best-grid-gallery/scripts/modula.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 10 Aug 2017 16:25:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1083
Keep-Alive: timeout=5, max=75
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/cpo-widgets/css/style.css?ver=4.9.21
162.215.240.160200 OK 1.5 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/cpo-widgets/css/style.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (313), with CRLF line terminators
Hash b57267255ceacf50bc94c1d962e890b2
203167ab23554c7f3eafb78d61a9e197526d5c48
fd9f57c54402d579ccfe8faf6d965bcb1ab95806ef1cee6e6c243afaf7ff0674
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cpo-widgets/css/style.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:23:51 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1501
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/google-captcha/css/gglcptch.css?ver=1.36
162.215.240.160200 OK 406 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/google-captcha/css/gglcptch.css?ver=1.36
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash e95e27698e6f751d4ad62863b1d3bb79
a2694366154127f41bf95f16d727ce488866ce04
67c9f4e5bff5dfe5dc2701e1979b6a7861f9a1fd25a04e05121fe4b3f6d79d27
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/google-captcha/css/gglcptch.css?ver=1.36 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 19 Apr 2018 07:48:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 406
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4061
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:10 GMT
Etag: "6332af16-1d7"
Last-Modified: Wed, 28 Sep 2022 01:08:29 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
reportmedicalnegligence.com/wp-content/plugins/super-socializer/css/front.css?ver=7.9.5
162.215.240.160200 OK 13 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/super-socializer/css/front.css?ver=7.9.5
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (40154), with no line terminators
Hash 7030d5903deccc1943de6ca460672c72
bbc0b4e30beee92fe44d05d1dd7ebfdb86283a97
a4cf867509f66fb1d4a25174f17449b11f8d5970e8843c784a11105b66114248
GET /wp-content/plugins/super-socializer/css/front.css?ver=7.9.5 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sat, 02 Dec 2017 07:29:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13167
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/themes/allegiant/style.css?ver=4.9.21
162.215.240.160200 OK 7.7 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/style.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (513), with CRLF line terminators
Hash aa95bc2db97d28d3c86de0f8ff9ebcf6
20c46e19e54b6c29e0c35752dca74d25edc11d9c
2ba8a31133d7193bd87480f01c0797538c3c06b5b8a8957735a564e769c15735
GET /wp-content/themes/allegiant/style.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sat, 10 Feb 2018 07:08:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7733
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/cpo-shortcodes/css/style.css?ver=4.9.21
162.215.240.160200 OK 8.8 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/cpo-shortcodes/css/style.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (575), with CRLF line terminators
Hash 324788fd8366eb23bd2391f7ce4003f2
69209673b449b9aea2e9a69e979ef51cee001e3a
1481a9bbe87e4eccd6c6124d7cda66a8aa33fb32eb645214cb7b8453366ed72b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cpo-shortcodes/css/style.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:25:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8814
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=6.2.6
162.215.240.160200 OK 4.0 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=6.2.6
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (972), with CRLF, LF line terminators
Hash 02cf32a78cb11df6786887a0096f8c2a
35d76eba315cf408982c6d7f9ccbf905d598fb48
802b543787b49417e66c859979c67bc302b729ae314a4ac3f636e9326e8b5ecd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=6.2.6 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Tue, 21 Nov 2017 17:06:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4038
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/js/jquery.touchSwipe.min.js?ver=1.6.6
162.215.240.160200 OK 5.4 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/js/jquery.touchSwipe.min.js?ver=1.6.6
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (10229)
Hash f82046516db797ee277a82de8970da22
bfab4819e708572a810e636fcba9ec1070768345
cff875b4b878241ba772d7bfa947bd32af19159a5e944263f01ff6d86848f6a2
GET /wp-content/plugins/so-widgets-bundle/js/jquery.touchSwipe.min.js?ver=1.6.6 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sun, 10 Dec 2017 18:33:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5438
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
162.215.240.160200 OK 5.8 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (9981)
Hash b2c786b73b3c53407361506c074ad58d
e0149c493c584193c65495e0a3606c9b2ecb9028
24df19d03e0b93d821834b8cd170f4c210b0a259e3d387b164064d8ab369e376
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Fri, 20 May 2016 06:11:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5829
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/modula-best-grid-gallery/scripts/jquery.modula.js?ver=4.9.21
162.215.240.160200 OK 6.9 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/modula-best-grid-gallery/scripts/jquery.modula.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 93e8fd33cb7e7baf92a5f584b0c03552
d98cd2a6dfe3ffc0649ac0fd9e8b5f77f97372da
c3969e1cf9ee947267e02238202fe60e21d943f79dcb526c83c1a3c8648ba384
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/modula-best-grid-gallery/scripts/jquery.modula.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:25:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6916
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/themes/allegiant/core/scripts/html5-min.js?ver=4.9.21
162.215.240.160200 OK 5.6 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/core/scripts/html5-min.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document text\012- HTML document, ASCII text, with very long lines (8469)
Hash 7973abe2fd0a3548a6911d8dccb3a8ec
2f151faf21833b7d41f2997137aed9e8a72f2076
c3cf6664677581c314659fb8aa7e5384544420895edf11059d126a5cb2c46c69
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/allegiant/core/scripts/html5-min.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:23:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5627
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
push.services.mozilla.com/
44.240.207.158101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.240.207.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xDtCXZB5iS+q1wuudsYqnQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UAYVUw7fYmXiZacl0Mpfj64ScTs=
reportmedicalnegligence.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.21
162.215.240.160200 OK 6.0 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (9063)
Hash cbeb81518fd1888464a4bd7fe68bda44
b763d3a3bdb119e5e7788fd95f28c4d177f6b750
fc6e839c7c55fe4f5e6935bc4f82c2ad7514a388e0eda34fbda9aafeb8dfe09f
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 02:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6017
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.1
162.215.240.160409 Conflict 83 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.1
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.1 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
reportmedicalnegligence.com/wp-content/themes/allegiant/core/css/icon-fontawesome.css?ver=4.9.21
162.215.240.160200 OK 287 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/core/css/icon-fontawesome.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash af442a960e4bd4da3e4f20e1a85056a0
5d416bc8cb57d7464aee4f0b85358ed19cdef08d
e29011f89262f926a3b26f4dfaac9d77fb7b00fd5093a106db73c838610cea80
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/allegiant/core/css/icon-fontawesome.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:23:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 287
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/js/carousel.min.js?ver=1.11.2
162.215.240.160200 OK 2.3 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/js/carousel.min.js?ver=1.11.2
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (2031)
Hash 0a4c0c4b7416fea7aa8fae13dc5878cb
2655d1baf8b6160398bcefd6acd08fc44a3dfa51
f62dd4ff8a4445932dd18871e09b1973128a045cf41f8ad151593a1bf4d94c08
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/so-widgets-bundle/widgets/post-carousel/js/carousel.min.js?ver=1.11.2 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sun, 10 Dec 2017 18:33:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2339
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-includes/js/comment-reply.min.js?ver=4.9.21
162.215.240.160200 OK 1.9 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-includes/js/comment-reply.min.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1098)
Hash 1ca47b3ac5024d1a01b1098f44ab4627
2800c217b34698335defc46dc1576247779af02b
76254cc39ded6e92eec834994f1b157913ffd6c73213786836198578f8bd69fe
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 02:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1947
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
162.215.240.160200 OK 44 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (31997)
Hash fd89ef4ea186d871fcb8ed988b1dde0d
2cacb46bbde407988db718e5da0981f676cb0746
0f13dabadcb54ca8ee8b7860b8c8b9c119c213cbc5e0816229e67b0e8dc6f876
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 05 Sep 2019 04:31:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/themes/allegiant/core/scripts/core.js?ver=4.9.21
162.215.240.160200 OK 1.6 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/core/scripts/core.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF, LF line terminators
Hash 933cc1fc900e263796b16d2ac9530e78
ddbe40cb1e8d99273cda59e48b8aa77ce4fdf8aa
88d3aba02fd8c67018e5b9abb65957d0b1a04bdd8b07e745497160ecbaa874f2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/allegiant/core/scripts/core.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:23:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1632
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/facebook/commenting.js?ver=7.9.5
162.215.240.160200 OK 2.6 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/facebook/commenting.js?ver=7.9.5
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (3249)
Hash 2c8bacb4d8b4a81160cc2f9272c2fde7
32ee9b5c58f43b0473d120c81cb9678ce75de6b1
1a83969dee7b6caa9833d5f65d4eecdded4ff3415c7973f1ed888c88f5cb36f2
GET /wp-content/plugins/super-socializer/js/front/facebook/commenting.js?ver=7.9.5 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sat, 02 Dec 2017 07:29:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2631
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/facebook/sdk.js?ver=7.9.5
162.215.240.160200 OK 2.2 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/facebook/sdk.js?ver=7.9.5
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (456)
Hash 480f160bd18ffef846f38329ffc79659
2a3cd266c88601ddd3a7c73a7620a6e8364060d8
b25e4fee320febda798c10155372dcf8935f895124a8f3f36b97938e2cbe9c0b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/super-socializer/js/front/facebook/sdk.js?ver=7.9.5 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sat, 02 Dec 2017 07:29:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2222
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/sharing/sharing.js?ver=7.9.5
162.215.240.160200 OK 16 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/sharing/sharing.js?ver=7.9.5
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (10831), with CRLF, LF line terminators
Hash a1485581165cbf559f58a426c4366f33
cfdc82e48664bf603ad9cf74ff37a808d345ca24
58c74fb2f7ec0098676a36fc9bed50e7bf31eae39ea8ed5cb89488a222df83e2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/super-socializer/js/front/sharing/sharing.js?ver=7.9.5 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Sat, 02 Dec 2017 07:29:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15841
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-includes/js/wp-embed.min.js?ver=4.9.21
162.215.240.160200 OK 2.1 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-includes/js/wp-embed.min.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1413)
Hash b4f161b8666a3bb14bc1795068f8fcad
607ab23e606ea0929e5b5984e34aab9780660f57
149ae5eaf48a6d51c0c559b57589b9a47bd606295dcb179963cac30c552d19f6
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 02:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2116
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/social_login/general.js?ver=7.9.5
162.215.240.160200 OK 3.0 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/super-socializer/js/front/social_login/general.js?ver=7.9.5
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1209)
Hash 0e896570a537e25ff1dbf3f399fd2f82
00dcd3193535211201f397bd3aa433b68e3d2be4
8512737a73a5449c73ed7a1f914de42da6c091eec4ed77ebfbf9026e41b3327c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/super-socializer/js/front/social_login/general.js?ver=7.9.5 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 02 Dec 2017 07:29:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3018
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
reportmedicalnegligence.com/wp-content/plugins/kiwi-social-share/assets/vendors/icomoon/style.css?ver=2.1.3
162.215.240.160200 OK 796 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/kiwi-social-share/assets/vendors/icomoon/style.css?ver=2.1.3
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 7a999a19e917c5f4a64897c05602668b
01e39c71eb8abc1db2940287ceaca162ee4127aa
b46b2998ac2eb42d8011f1de496f22412e18966c778ab29c25d924b9bf12f1b4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/kiwi-social-share/assets/vendors/icomoon/style.css?ver=2.1.3 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Wed, 09 Jun 2021 09:42:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 796
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/plugins/i-agree-popups/includes/assets/css/i-agree-popups.css?ver=4.9.21
162.215.240.160200 OK 778 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/i-agree-popups/includes/assets/css/i-agree-popups.css?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash e8684248b200f66d72762d55027c68e2
84ab2b94e715bcf4000727ef1b4d1e7bfb6700b2
34455a153c78327dc3012049bd30a08769aedf74bf34d2cfd93860d45f3cf903
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/i-agree-popups/includes/assets/css/i-agree-popups.css?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 26 Oct 2017 08:18:13 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 778
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
reportmedicalnegligence.com/wp-content/themes/allegiant/core/scripts/jquery-cycle2-min.js?ver=4.9.21
162.215.240.160200 OK 11 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/core/scripts/jquery-cycle2-min.js?ver=4.9.21
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (10280)
Hash d94e798da9352a22782a7c2818c82b7c
66eb92162616114b05c6691f0d56ac7a232eeaef
c873aeb430e6f7d53f89c15aab720c75f483d45fbe78966029e2e32760d82d53
GET /wp-content/themes/allegiant/core/scripts/jquery-cycle2-min.js?ver=4.9.21 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:10 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:23:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10632
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
142.250.74.163200 OK 13 kB URL HTTP/1.1 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://reportmedicalnegligence.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 13036
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 21:56:50 GMT
Expires: Thu, 21 Sep 2023 21:56:50 GMT
Cache-Control: public, max-age=31536000
Age: 533961
Last-Modified: Wed, 27 Apr 2022 16:04:42 GMT
Content-Type: font/woff2
skambio-porte.com/js1
91.228.56.183200 OK 20 B IP 91.228.56.183:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
GET /js1 HTTP/1.1
Host: skambio-porte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 28 Sep 2022 02:16:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: 4be80e64e8a11bbfad18eeaa74509d36=0; expires=Thu, 29-Sep-2022 02:16:11 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=None
Content-Encoding: gzip
reportmedicalnegligence.com/wp-content/uploads/2017/08/hospital-doctor-negligence-complaint-600x400.jpg
162.215.240.160200 OK 28 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/hospital-doctor-negligence-complaint-600x400.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left], baseline, precision 8, 600x400, components 3\012- data
Hash 3a3f30b6f5cad6af32a19365ab286d47
a45e70f900215444d94c428f8d00711ad8fcb9a4
6103b8bea5f5311f9a14e8651af2f7f249b77b1d55c7f1ae3795b62a4abc9eb5
GET /wp-content/uploads/2017/08/hospital-doctor-negligence-complaint-600x400.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 24 Aug 2017 13:40:02 GMT
Accept-Ranges: bytes
Content-Length: 27838
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2017/08/Eye-Injury-complaint-1-600x377.jpg
162.215.240.160200 OK 28 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/Eye-Injury-complaint-1-600x377.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 600x377, components 3\012- data
Hash 977af069704c4da26c5a62e52c6ab04f
3b11e73d7a03fc9f49ffcf8b6f8426c1a432d363
6b85d51a02a8d52cded698ea1e3b2cc17524f72c068f2de6640ea82a92a489cc
GET /wp-content/uploads/2017/08/Eye-Injury-complaint-1-600x377.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 24 Aug 2017 13:07:57 GMT
Accept-Ranges: bytes
Content-Length: 27473
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2017/10/logo-1.png
162.215.240.160200 OK 14 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/10/logo-1.png
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 275 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash a69f371dd02934e4cd3380c298b10ab6
1b6ce750160e049cc2bac8452144eed8e1551a75
6dc69d67870f249ff15fdb19fe53f7bd04830f5d7d086423cdea021f994e9e2a
GET /wp-content/uploads/2017/10/logo-1.png HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 26 Oct 2017 08:57:19 GMT
Accept-Ranges: bytes
Content-Length: 14032
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
reportmedicalnegligence.com/wp-content/uploads/2017/08/cosmetic-surgery-complaint-600x284.jpg
162.215.240.160200 OK 18 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/cosmetic-surgery-complaint-600x284.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x284, components 3\012- data
Hash 0d80d245c7b3a7f60c75637073b1bff1
04b3e8f347e27bd90876558fa4180812e9e2ff56
dfce6b58aed4942877d996d0bec418affa4360025ee490c42f44c715f49bd81f
GET /wp-content/uploads/2017/08/cosmetic-surgery-complaint-600x284.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 24 Aug 2017 13:45:35 GMT
Accept-Ranges: bytes
Content-Length: 18469
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2017/08/surgery-medical-negligence-600x400.jpg
162.215.240.160200 OK 32 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/surgery-medical-negligence-600x400.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash 3c60196449d713e284cc60c6cf9a8a49
1b8c22630146dc2e369c6327691ad36ced1cb1af
47e291db90c482177cc5a4066323546255223f2049909acf9040ceaf47927456
GET /wp-content/uploads/2017/08/surgery-medical-negligence-600x400.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sat, 12 Aug 2017 09:01:44 GMT
Accept-Ranges: bytes
Content-Length: 32257
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.1
162.215.240.160409 Conflict 83 B URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.1
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.1 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 409 Conflict
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
reportmedicalnegligence.com/wp-content/uploads/2017/08/pregnancy-and-birth-600x376.jpg
162.215.240.160200 OK 38 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/pregnancy-and-birth-600x376.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x376, components 3\012- data
Hash 7b3c1c36278538d9dd73835de832af91
24b79280487788ff7c2b2823b915aa326ec63fd4
8a1ee50310fcf287789fb43319eedc16a1d42d502f5a6ba2b862541f3bdaa74f
GET /wp-content/uploads/2017/08/pregnancy-and-birth-600x376.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sat, 12 Aug 2017 09:06:38 GMT
Accept-Ranges: bytes
Content-Length: 37755
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/themes/allegiant/core/fonts/fontawesome-webfont.woff2?v=4.3.0
162.215.240.160200 OK 57 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/themes/allegiant/core/fonts/fontawesome-webfont.woff2?v=4.3.0
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /wp-content/themes/allegiant/core/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/wp-content/themes/allegiant/core/css/icon-fontawesome.css?ver=4.9.21
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 16:23:28 GMT
Accept-Ranges: bytes
Content-Length: 56780
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: font/woff2
reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/fonts/carousel-arrows.woff?-95vnmw
162.215.240.160200 OK 1.1 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/fonts/carousel-arrows.woff?-95vnmw
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format, CFF, length 1112, version 0.0\012- data
Hash 752f3bb5492f3218f57478d3aff54140
d96bdddc6df4acb6f3b5765b2d1ae8441c7abd58
2db58003639201f702240221b128a1a23b2b4c211eefcf723520167eb065c95b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/fonts/carousel-arrows.woff?-95vnmw HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/wp-content/plugins/so-widgets-bundle/widgets/post-carousel/css/style.css?ver=1.11.2
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sun, 10 Dec 2017 18:33:41 GMT
Accept-Ranges: bytes
Content-Length: 1112
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: font/woff
reportmedicalnegligence.com/wp-content/uploads/2017/08/pharmacy-negligence-mistakes-600x400.jpg
162.215.240.160200 OK 30 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/pharmacy-negligence-mistakes-600x400.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x400, components 3\012- data
Hash 9f5d89011a981ee48c18efe55f33cf39
6e40b27bbc02031f182b7ae4c2d6f4cd3342b746
ffd6c39dab76bd44d70812d8e60124ca02f0c760b5bbd8d76d69f0b0e77d971c
GET /wp-content/uploads/2017/08/pharmacy-negligence-mistakes-600x400.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sat, 12 Aug 2017 09:14:34 GMT
Accept-Ranges: bytes
Content-Length: 30187
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2015/06/medical-malpractice-delhi.jpg
162.215.240.160200 OK 93 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2015/06/medical-malpractice-delhi.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1349x400, components 3\012- data
Hash 196495d1f3aa6cea49d2ebeec4731f54
b20e7fb28d500af5baaa0fb90791fdce5badaf20
1a767678be9552b2b60ed438220dcf1d31446585c47e093f8d2b0669ae45c9d6
GET /wp-content/uploads/2015/06/medical-malpractice-delhi.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 10 Aug 2017 17:59:22 GMT
Accept-Ranges: bytes
Content-Length: 93186
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2017/12/four-elements-which-must-be-presented-by-a-medical-negligence-and-or-malpractice-advocate-272x182.jpg
162.215.240.160200 OK 8.9 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/12/four-elements-which-must-be-presented-by-a-medical-negligence-and-or-malpractice-advocate-272x182.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 272x182, components 3\012- data
Hash c9d6ca14329414603174eaa1e900a5dc
80866f972bfef0bd04a7b585468ca3f39710a11d
2d744c5c8671e44d5a8fb2d557f0e9cb27efc4d50b1c39c0d921b9c67c5cceed
GET /wp-content/uploads/2017/12/four-elements-which-must-be-presented-by-a-medical-negligence-and-or-malpractice-advocate-272x182.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sun, 10 Dec 2017 19:02:14 GMT
Accept-Ranges: bytes
Content-Length: 8883
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2017/08/medical-negligence-medical-malpractice-medical-negligence-lawyers-1.jpg
162.215.240.160200 OK 56 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/08/medical-negligence-medical-malpractice-medical-negligence-lawyers-1.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 880x452, components 3\012- data
Hash 251ea2874c23b17cbf114a5282c979e7
426cbc527e74f8b24173d056bc765571c3b9dde7
99486d0094004f8ae7848ed0af18d1293423a272483a47dd8c4e649eed66848a
GET /wp-content/uploads/2017/08/medical-negligence-medical-malpractice-medical-negligence-lawyers-1.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 07:03:30 GMT
Accept-Ranges: bytes
Content-Length: 56437
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2018/04/medical-negligence-banner.jpg
162.215.240.160200 OK 91 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2018/04/medical-negligence-banner.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1349x898, components 3\012- data
Hash ca9ab9f8c8e61c0a8c6faf64bba97a26
4fd2245e362bed243bf4c8a1012eaa66c6e4e010
601f49efb8368671dc998a93d29eb34439f098873c88fb70fe95b670752f2f13
GET /wp-content/uploads/2018/04/medical-negligence-banner.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Fri, 20 Apr 2018 10:44:34 GMT
Accept-Ranges: bytes
Content-Length: 90687
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2018/01/medical-negligence-cases-in-india-272x182.jpg
162.215.240.160200 OK 24 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2018/01/medical-negligence-cases-in-india-272x182.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=3744, bps=0, compression=LZW, PhotometricIntepretation=RGB, description=Closeup portrait of a disappointed young lady surgeon with her hand on her face, manufacturer=Canon, model=Canon EOS-1Ds Mark III, orientation=[*0*], width=5328], baseline, precision 8, 272x182, components 3\012- data
Hash a4582b4808563de8c6c745d35e138034
96d33db3ff193eeb31b03073feb720a3a0937311
abf38c36af7ea14668299079d892afd235d61b3f80303f4e47b67a1e1c67edca
GET /wp-content/uploads/2018/01/medical-negligence-cases-in-india-272x182.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Mon, 08 Jan 2018 13:08:38 GMT
Accept-Ranges: bytes
Content-Length: 23971
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2018/01/max-hospital-shalimar-bagh-272x182.jpg
162.215.240.160200 OK 12 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2018/01/max-hospital-shalimar-bagh-272x182.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 272x182, components 3\012- data
Hash 309fc0e06b03cafab1e5cb67f4da5e0d
1f3de2c0cf30afc77490460d67ec1dfb7354a5b2
0462af27bc9b04e06a089c96d0ff4de8e95d999f4b805e4b010651f109653d11
GET /wp-content/uploads/2018/01/max-hospital-shalimar-bagh-272x182.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 08 Jan 2018 11:37:40 GMT
Accept-Ranges: bytes
Content-Length: 12000
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2018/01/medical-negligence-law-firms-272x182.jpg
162.215.240.160200 OK 8.6 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2018/01/medical-negligence-law-firms-272x182.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 272x182, components 3\012- data
Hash 450a6a6315c13e3dd789e350dd5c28d3
caca74b4fb064540d7087d90f7ca92bc13d0b2ba
8abfd3affe52ec3cc553a60c4a187d8cdd61bb3103fb81ea15a1b56ff72e4421
GET /wp-content/uploads/2018/01/medical-negligence-law-firms-272x182.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Mon, 29 Jan 2018 12:21:53 GMT
Accept-Ranges: bytes
Content-Length: 8643
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2017/12/injury_lawyers_accident_compensation_delhi.jpg
162.215.240.160200 OK 18 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2017/12/injury_lawyers_accident_compensation_delhi.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 801x217, components 3\012- data
Hash 42454a5fff7f9d5011554653af2469c8
c616fc00c376d4ca33db3dfa3b59ae87eff50285
c0dca513b07389d6ef5b9b390335765327bc27470a05f0cac98afd78a5d35cd7
GET /wp-content/uploads/2017/12/injury_lawyers_accident_compensation_delhi.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 18:18:14 GMT
Accept-Ranges: bytes
Content-Length: 18265
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Wed, 28 Sep 2022 03:34:43 GMT
Date: Wed, 28 Sep 2022 02:16:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b255b252ceed088d6f505e7e9acfcb55
a6b1c3e0d506ac1c66405e061e9910fafb176a7d
b796a98834c7ecf220d13bfba61e81a9b90d472d2aa725ff66888cbddad731e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6157
x-amzn-requestid: a51846e4-4e25-455f-885b-acf2567f2e1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDlObH7XIAMFw6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63314f28-4e6a68a74edb1ad850e17dac;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 07:05:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2g98EnyiFhkZTsqis2_ASfjM-YTJmcUJ-Mwcl1dWlruzrWDuojPA0w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:29:45 GMT
age: 67586
etag: "a6b1c3e0d506ac1c66405e061e9910fafb176a7d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee83d08d024d127fad5918e1ffacb78b
8ad289a77705358ab660b6123e9d90de991b6c13
aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 16522
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b794c6812cb546de0295e087ebe66a7
a54803cca7d3c509c195f65961e1110c8ec56f55
6a207f75eb3951f3dea5252bc8d185cd604d3d657f15b838774e8087e91f37f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12016
x-amzn-requestid: ec1b3715-5d0f-4045-aa5b-b70a55c81d72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3EtyIAMFdZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-201dd1ef1426a09965c68dab;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: y3DefdcXJyoDHpJXwz460gfWcv2JUboOFExNQmTFgy30B4mn54Xvuw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:44:30 GMT
age: 16301
etag: "a54803cca7d3c509c195f65961e1110c8ec56f55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d039db0b842a4cbbaefdaab98bc6722b
78b1a603c4f7f2d6fbad15d7a4cd1397554339e9
65a3c7b0515cfd2a723f3bc3147cb98f3dd75ce1ecfce915c7c8e9ba5ae0bf2d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14018
x-amzn-requestid: fb0f02e7-1ce0-4861-9446-13d60df06f24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xSEhCIAMFWkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-79f482493d204a1208fad00f;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZAov4fpWAjIBhHfeYEwu39wJTG58HnW7ebekpIoNSgA7PLIs5b7sSg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:19 GMT
age: 14812
etag: "78b1a603c4f7f2d6fbad15d7a4cd1397554339e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1fa8cb4f4be5057788cd1a2a4d0e76d6
1aec1d67a36867bee8069a144fb1b0d95ff2cb54
5193131db8040ef254554d59109002ec7b8cfc2eab1e872b63e5f65db7cf5105
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5944
x-amzn-requestid: 040b4452-4120-4ae5-9ad2-c5b341abbb13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI34BFdmIAMFmew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cff-103adde82b57535e4f3fb16a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:37:04 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: q03mXCSikJcsTBGqk1Xq7452EiDz4t9PFbp5Qj4xwobiFgqtPwGCBw==
via: 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 23:06:54 GMT
age: 11357
etag: "1aec1d67a36867bee8069a144fb1b0d95ff2cb54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea3890e460356d6ecc3ba4e405ac2e9e
b383135e2ebc23fe80eb0d594b198cb8c89327a5
8fcff053ce6e5750136bf876bad5b2916935f13ea039912d977928b086f0a48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: e99c9f33-b72a-4070-80cf-06fb4a87d1df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZG4S6EcAoAMFX1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6332a0df-04122b4a345dbc3f3918af98;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 07:06:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: yW-bGn5vYTa6Z28ELKYgYpy98wQEbYJIl5yxd1qLxz1YjVYKxMH2Wg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:31:02 GMT
age: 67509
etag: "b383135e2ebc23fe80eb0d594b198cb8c89327a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
reportmedicalnegligence.com/wp-content/uploads/2018/01/medical-negligence-hospital-272x182.jpg
162.215.240.160200 OK 25 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2018/01/medical-negligence-hospital-272x182.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 272x182, components 3\012- data
Hash 0b9f15270524ddde16dd41861c87da3a
95cf618c47a6e2a184a773e5a81de430d0e43f57
bfb57abb51af945ce5595aca27ce6f025a1608cd26140c976a6f18309b29e06d
GET /wp-content/uploads/2018/01/medical-negligence-hospital-272x182.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Thu, 25 Jan 2018 07:20:17 GMT
Accept-Ranges: bytes
Content-Length: 25037
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/jpeg
reportmedicalnegligence.com/wp-content/uploads/2018/02/cbi-272x182.jpg
162.215.240.160200 OK 12 kB URL HTTP/1.1 reportmedicalnegligence.com/wp-content/uploads/2018/02/cbi-272x182.jpg
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 272x182, components 3\012- data
Hash 39915f2640bb8594c1d6f8396ea33c1c
b9cc85814637ef9c6fd49e236fe14e73117b158c
57f967e769a1c4d62a6a89fb744284a4df90bc8abe4425114a113ba5ee66bfbd
GET /wp-content/uploads/2018/02/cbi-272x182.jpg HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Last-Modified: Fri, 09 Feb 2018 06:54:35 GMT
Accept-Ranges: bytes
Content-Length: 12289
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 19826
Date: Wed, 28 Sep 2022 00:20:54 GMT
Expires: Wed, 28 Sep 2022 02:20:54 GMT
Cache-Control: public, max-age=7200
Age: 6917
Last-Modified: Sun, 11 Sep 2022 13:50:09 GMT
Content-Type: text/javascript
apps.facebook.com/favicon.ico
157.240.200.16301 Moved Permanently 0 B URL HTTP/1.1 apps.facebook.com/favicon.ico
IP 157.240.200.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: apps.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 301 Moved Permanently
Location: https://apps.facebook.com/favicon.ico
Content-Type: text/plain
Server: proxygen-bolt
Date: Wed, 28 Sep 2022 02:16:11 GMT
Connection: keep-alive
Content-Length: 0
connect.facebook.net/en_US/sdk.js
157.240.200.14200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/en_US/sdk.js
IP 157.240.200.14:0
File type ASCII text, with very long lines (1961)
Hash 8e151b02f45a6ee2acbe12d632763489
59ebb4777aad1656401c19e802d8bc74224b72d6
61a86b5713b607f932f0a8db06eb4d1c6e47629f254d5dda0d4ec3851bf5ee9e
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 1ced18732a469ae3f714c414d71ff243
ETag: "edd62ad2e54ee368f3018e048a57ba41"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Wed, 28 Sep 2022 02:24:14 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: jhUbAvRabuKsvhLWMnY0iQ==
X-FB-Debug: YoUKfcjuvyGFipaFKiOcN4hg80QToSjxPZiPg/fXLLuu+CgYyHOfDb4NEQQz6qTf4QobVkOkscuhBEcLfbq/IQ==
Priority: u=3,i
X-FB-TRIP-ID: 1679558926
Date: Wed, 28 Sep 2022 02:16:11 GMT
Alt-Svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 1688
www.google-analytics.com/plugins/ua/linkid.js
142.250.74.174200 OK 859 B URL HTTP/1.1 www.google-analytics.com/plugins/ua/linkid.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1335)
Hash 904463ce35aee800847ab85ec948aaf6
904e4d2647466c7f7e0f7412019984e3b2ccfb24
057b4d29359dfe2536a2ec40243bdfa7b151222efcc1eb358608994a14c34237
GET /plugins/ua/linkid.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 859
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 28 Sep 2022 01:33:33 GMT
Expires: Wed, 28 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=3600
Age: 2558
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: text/javascript
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd9c95c1c24789f4041887b11468ab7e
bf202eeda47e79ac15d77325a02a1206bec63dcb
86f005e634685a4eb89dd87735b4cc0d91163be2912c470a529f0eb223531dbf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4766
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:11 GMT
Last-Modified: Wed, 28 Sep 2022 00:56:45 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd9c95c1c24789f4041887b11468ab7e
bf202eeda47e79ac15d77325a02a1206bec63dcb
86f005e634685a4eb89dd87735b4cc0d91163be2912c470a529f0eb223531dbf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4766
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:11 GMT
Last-Modified: Wed, 28 Sep 2022 00:56:45 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js?hash=857514f7f17c925a1c2e539dd3ad9c99
157.240.200.14200 OK 89 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=857514f7f17c925a1c2e539dd3ad9c99
IP 157.240.200.14:0
File type ASCII text, with very long lines (18598)
Hash 4b0ea15224acba8f886fe08198691d74
2d946cf5ddc25e61a782e3dc14b544de7a7bb250
8e6679bb7b28d6ebaac008d812fa91ceeddaa1fa27b9af0ac29e7180e52b7f61
GET /en_US/sdk.js?hash=857514f7f17c925a1c2e539dd3ad9c99 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://reportmedicalnegligence.com
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 944e523417dbae420bed7f136f486103
etag: "92dde89174e42a8c253d738e12d6b5a2"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 28 Sep 2023 01:32:09 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Sw6hUiSsuo+Ib+CBmGkddA==
x-fb-debug: VI+JCGu/cFHG4ZdGLbZAWGkVFeEh7+/zu8QLdA1auJdo9uMaBQpC1m1Xz/1XESRXP2fT9SfQczwKZ+8dz+FJKw==
priority: u=3,i
content-length: 88835
x-fb-trip-id: 1679558926
date: Wed, 28 Sep 2022 02:16:11 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd9c95c1c24789f4041887b11468ab7e
bf202eeda47e79ac15d77325a02a1206bec63dcb
86f005e634685a4eb89dd87735b4cc0d91163be2912c470a529f0eb223531dbf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4767
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Last-Modified: Wed, 28 Sep 2022 00:56:45 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&gjid=1871741628&_gid=2117601610.1664331370&_u=aGBAgUAjCAAAAE~&z=1696171475
64.233.165.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&gjid=1871741628&_gid=2117601610.1664331370&_u=aGBAgUAjCAAAAE~&z=1696171475
IP 64.233.165.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&gjid=1871741628&_gid=2117601610.1664331370&_u=aGBAgUAjCAAAAE~&z=1696171475 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://reportmedicalnegligence.com
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://reportmedicalnegligence.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 28 Sep 2022 02:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
reportmedicalnegligence.com/favicon.ico
162.215.240.160404 Not Found 0 B URL HTTP/1.1 reportmedicalnegligence.com/favicon.ico
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 02:16:11 GMT
Server: Apache
Content-Length: 0
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
apps.facebook.com/favicon.ico
157.240.200.16200 OK 2.2 kB URL HTTP/2 apps.facebook.com/favicon.ico
IP 157.240.200.16:0
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 071f2b8030cd69422646898468023a4d
0da29dfd269403cf7ccc8eae6a8a7c6c3bb86d4d
c026290f6d8d41619b4f2472eda96778a9c677f26bd81a72cf76292cd0d24563
GET /favicon.ico HTTP/1.1
Host: apps.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://reportmedicalnegligence.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: image/png
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-frame-options: DENY
strict-transport-security: max-age=15552000; preload
x-fb-debug: ZK6GcdA7uuhSu2pX69dinW2msFR1us8FG/gDzlGfQtxr/Z0mZCNs6Ww6Oh2REoW80wHxTmbCw/A3vkEcjHvLbQ==
date: Wed, 28 Sep 2022 02:16:12 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 5e01e4cfb215a3f052b4c716bc77c1a6
6e63b3e883051319571310c44b87591f0312d83f
aebb544e0762c6c3eb289d85c20299baa3f742dc46cfa5bcc33ac6df411285ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&_u=aGBAgUAjCAAAAE~&z=370220731
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&_u=aGBAgUAjCAAAAE~&z=370220731
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&_u=aGBAgUAjCAAAAE~&z=370220731 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 02:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&_u=aGBAgUAjCAAAAE~&z=370220731
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&_u=aGBAgUAjCAAAAE~&z=370220731
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-110031264-1&cid=550389244.1664331370&jid=1873825778&_u=aGBAgUAjCAAAAE~&z=370220731 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 02:16:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 02:16:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
reportmedicalnegligence.com/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls%5B%5D=http%3A%2F%2Freportmedicalnegligence.com%2F
162.215.240.160200 OK 146 B URL HTTP/1.1 reportmedicalnegligence.com/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls%5B%5D=http%3A%2F%2Freportmedicalnegligence.com%2F
IP 162.215.240.160:0
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JSON data\012- , ASCII text, with no line terminators
Hash 79ff76ff016a870038c2242a0ec291a5
9fb925cba8a8f3b12db59e9b8df7d23799023682
8e25ebe07d5023879a19d6da343b61bed6ac93b8bb8c4741edb03d71c9b9513c
GET /wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls%5B%5D=http%3A%2F%2Freportmedicalnegligence.com%2F HTTP/1.1
Host: reportmedicalnegligence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
Cookie: _ga=GA1.2.550389244.1664331370; _gid=GA1.2.2117601610.1664331370; _gat=1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 02:16:12 GMT
Server: Apache
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 146
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
graph.facebook.com/?id=http://reportmedicalnegligence.com/
157.240.200.16400 Bad Request 202 B URL HTTP/1.1 graph.facebook.com/?id=http://reportmedicalnegligence.com/
IP 157.240.200.16:0
File type JSON data\012- , ASCII text
Hash a16f34f1361b327db6abab27644cb915
f3cd1a43bdc9a2f4b3944b7ebf51f030862b42b2
39a72e5e1830be87ad72fcce79d988088720fae796c626df61bc881fddb02536
GET /?id=http://reportmedicalnegligence.com/ HTTP/1.1
Host: graph.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://reportmedicalnegligence.com
Connection: keep-alive
Referer: http://reportmedicalnegligence.com/
HTTP/1.1 400 Bad Request
Vary: Origin
x-fb-rlafr: 0
Content-Type: application/json
WWW-Authenticate: OAuth "Facebook Platform" "invalid_request" "(#2) Service temporarily unavailable"
Access-Control-Allow-Origin: *
facebook-api-version: v8.0
Pragma: no-cache
Cache-Control: no-store
Expires: Sat, 01 Jan 2000 00:00:00 GMT
x-fb-request-id: A4rgYhqyMcYZLodUHsfhtSu
x-fb-trace-id: HGOpD8yz46G
x-fb-rev: 1006281039
X-FB-Debug: A7/DEDubhxf3BdmmxceOz0pSxDc2x6pc/IZDiu5goIdkiaYJJ791H2awrTC5XIpJUXNxySaSQuBnHbvmFPw+uw==
Date: Wed, 28 Sep 2022 02:16:13 GMT
Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 202