| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2b424d8c01b211c56d5b44b92e4e4153 b1fdab18f23271eee58ae1482f8af25badc2ffda 1c82a5fd2bc3f16a66becb5e1924e8c9edd39386622dc2e5ed296442f4307b2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5567
Expires: Sat, 15 Oct 2022 11:46:29 GMT
Date: Sat, 15 Oct 2022 10:13:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ac5efdb9326bde16c3b797cf1bcc9df 68442a3b6df156ef1db3776ab34504bd94cfaaa4 7ea6ddecc2f499b9523ab0fc41ccd8c818af7479820c13615ad846be9fa49504
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7EA6DDECC2F499B9523AB0FC41CCD8C818AF7479820C13615AD846BE9FA49504"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2840
Expires: Sat, 15 Oct 2022 11:01:02 GMT
Date: Sat, 15 Oct 2022 10:13:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha57d0f62d9bd29668b94a513fa45d18e d7cb263502e21f9235b4523a596e2138d22042ec df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15660
Expires: Sat, 15 Oct 2022 14:34:42 GMT
Date: Sat, 15 Oct 2022 10:13:42 GMT
Connection: keep-alive
|
|
| getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 |  34.120.5.221 | 200 OK | 45 kB |
URL HTTP/2getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 IP34.120.5.221:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash456dd1e5664e70dd00a955097b512446 687007a20d489253aa0b043c4b550e5585d61fac e90cc67ff57094ce60124b240f2bc737d20e1ccfa033197ecf79cb6b3a1a4687
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: OZHPFSLfMrBFxhvdPQzBDm3dQVMI6oJlCnD2zjyvCqa4W4sa3ELQlQ==
content-encoding: gzip
via: 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 10:08:23 GMT
content-type: application/json
content-length: 44678
age: 319
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 46zhD424+7fhP7Mn2UqmcwMtL23lWFLlM7IfSySTOFqfeEsOQrEDq2W8I2pcPptV36TWzjyMbPw=
x-amz-request-id: 0ZE8PD8FES2AAG1A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 15 Oct 2022 10:02:33 GMT
age: 669
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 15 Oct 2022 10:13:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.35 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashc9df6b36bf16969ac566c1b798362e4a e56eff34815153ae019a4bf63eb9746dd9ae2e5b 33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 15 Oct 2022 09:50:04 GMT
Expires: Sat, 15 Oct 2022 10:42:52 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4U0DsM9VisRRRr1lKunGmlk9Oub6vIll2xnpjjZyzLew6SCQLvbFBg==
Age: 1418
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.35 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 15 Oct 2022 10:07:43 GMT
Expires: Sat, 15 Oct 2022 10:57:06 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EvKoK-MHLohhFcGVvEyNwgaWHXL1I0Cr_ZP9x-lIzhDgiGedO9786Q==
Age: 359
|
|
| healthpro.ai/ensl/modeuadaersrlenco | 185.148.47.88 | 301 Moved Permanently | 0 B |
URL HTTP/2healthpro.ai/ensl/modeuadaersrlenco IP185.148.47.88:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /ensl/modeuadaersrlenco HTTP/1.1
Host: healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
referrer-policy: origin-when-cross-origin
feature-policy: accelerometer 'self'; autoplay 'self'; camera 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; payment 'self'; usb 'self'
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.healthpro.ai/ensl/modeuadaersrlenco
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 15 Oct 2022 10:13:41 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash301aafc13bc66315321d9476df002258 e6bfd29899543fcd4d1b332623757bbad355306f c64315afdfcf146b16942d981588ed912650472c5e2bba7b6f8dee396d820860
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3197
Cache-Control: max-age=168390
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:42 GMT
Etag: "634a6a1f-1d7"
Expires: Mon, 17 Oct 2022 09:00:12 GMT
Last-Modified: Sat, 15 Oct 2022 08:06:55 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.89.17.198 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.89.17.198:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fgFcXWOGfSMCXnoe78z6rw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uO9JP02YIquIjosjkvrOVOeM65w=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd446ca2d7c9a77d48cb8ec47e5f6a506 db79409c874f5336a0bbc53cc5ec00018ee18810 90474edacd2d615e4a50ff9a86a656cb3e9b91be6a6b455d607da73ab4faabd5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5678
Cache-Control: max-age=125152
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:43 GMT
Etag: "6349b789-117"
Expires: Sun, 16 Oct 2022 20:59:35 GMT
Last-Modified: Fri, 14 Oct 2022 19:24:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=5.7.7 |  104.17.24.14 | 200 OK | 10 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=5.7.7 IP104.17.24.14:0
File typeASCII text, with very long lines (59119) Hash14e1692fd4263ccfea0b84299bdbf1f5 7783020a9ced5f32c8d38205357c7d10798be1fd 8ff0cd2d1e7f0b6203a762fb9811256d4445a3ad0d97f07102e038ba0eb3db72
GET /ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=5.7.7 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.healthpro.ai
Connection: keep-alive
Referer: https://www.healthpro.ai/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 15 Oct 2022 10:13:43 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1404489
expires: Thu, 05 Oct 2023 10:13:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FeszyVe2p7UUuefylrJ0d4AhhY%2F2%2FMYC1H2Dpxq7iANVqFKt2wbYI2thhJgxXLChsBJaNnO%2BGQ6d%2BXgx4kED4wmU4msexBFnWbBH0785dMiKB8%2BrvSghGfbe%2B8Jgq%2Fp8HueWskH6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75a7c8a1fbf41c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd446ca2d7c9a77d48cb8ec47e5f6a506 db79409c874f5336a0bbc53cc5ec00018ee18810 90474edacd2d615e4a50ff9a86a656cb3e9b91be6a6b455d607da73ab4faabd5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5678
Cache-Control: max-age=125152
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:43 GMT
Etag: "6349b789-117"
Expires: Sun, 16 Oct 2022 20:59:35 GMT
Last-Modified: Fri, 14 Oct 2022 19:24:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
|
|
| www.healthpro.ai/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 | 185.148.47.88 | 200 OK | 2.7 kB |
URL HTTP/2www.healthpro.ai/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (2714), with no line terminators Hash087102ecb9f9971d052fddc91ecc63e9 7c487378bbe1f0f48daba4b006fcf55a2d1f9033 3ee638689e343730a82027d03714f274b6c665cf7e3bf60b5208a3a0cdb3581d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:21:20 GMT
accept-ranges: bytes
content-length: 2714
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash48c8ca7abddebd077f8d5655ab885b11 1daa9bb3c1434275bbd57b9237000b72e59e1fcc 95e3c6bd5eb86b7805c5899ebd2157f214a5aec3c180830c1db3e0256097ee6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6LfJ0bcZAAAAAF7QuX9HwZLpwEYgTf9GhK__nNzC&ver=3.0 | 142.250.74.164 | 200 OK | 585 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LfJ0bcZAAAAAF7QuX9HwZLpwEYgTf9GhK__nNzC&ver=3.0 IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hash8c5145f65b6ef8fdda4dc8ce9f6c938e 459274fd4bd7ff3acaa4869a39983ea581be12d1 c60f9f5619a982883001e484618674459b5e1800508a3dbaa7f2ccef02ee8fbb
GET /recaptcha/api.js?render=6LfJ0bcZAAAAAF7QuX9HwZLpwEYgTf9GhK__nNzC&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.healthpro.ai/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 15 Oct 2022 10:13:43 GMT
date: Sat, 15 Oct 2022 10:13:43 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 | 185.148.47.88 | 200 OK | 58 kB |
URL HTTP/2www.healthpro.ai/wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (29677) Hashb5d1e2c87b60ce71c3fd90ca27073250 b65e3890ef1565f98971b344b4c85866a5f33860 2cd9de3dd26246204749cff259bc34e8e6a47ae5d6e4528b9b28c75d68d50cde
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:21:20 GMT
accept-ranges: bytes
content-length: 58171
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 | 185.148.47.88 | 200 OK | 8.3 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (7116) Hash9c8e291a9590fb94c64f981c45968305 c6f28911c1bc65dc22a43f49283d4af2ff08e54c a5a517dcd7ee8ef045de498a1784b06744782c7a69bfaa88a91b894f95da4b88
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 20 Sep 2022 20:00:39 GMT
accept-ranges: bytes
content-length: 8259
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashbac53a9e47b402471127f290b676b367 d5aa4a8d0571a6c8519d8ab9d369c040ede52ca1 8985fb669fe4022d05158aa7a8fd8033d9b4ae4f9011f3f947e2365d4ebe19f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.healthpro.ai/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 | 185.148.47.88 | 200 OK | 2.7 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 IP185.148.47.88:0
Hashe6fae855021a88a0067fcc58121c594f 6299ac3987b5e81725781799dad361d19ac3b99d e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 19 May 2022 09:18:16 GMT
accept-ranges: bytes
content-length: 2731
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 | 185.148.47.88 | 200 OK | 60 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators Hashcdcd5bc66c5f341dbea8118b06f087dc 6319bb7556398283ebbf757eca36ebf3af09b444 7f618063d56febc293240fa3a3d8281433f248faa4045a4e076fe45b8d69e9ec
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:57:12 GMT
accept-ranges: bytes
content-length: 60289
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 | 185.148.47.88 | 200 OK | 869 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 IP185.148.47.88:0
File typeASCII text, with very long lines (826) Hashb785ea8734e1436a6f0d5e0b3b4bd8c1 18c587cee3fd14cbab5372e295e001c4d9a4c4d3 9af98e149ed5a7af3bbfe75257ddb5a7d4bc5f0be036822f89b2a1fa809fd21e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:19:37 GMT
accept-ranges: bytes
content-length: 869
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 | 185.148.47.88 | 200 OK | 245 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 IP185.148.47.88:0
Hashfb4e2445daa49dadab2bb4c5981b8fd9 b386f3da83ab16fa6c0566f4cefb6fce89e42ac2 cbdc00cbfda953b528c24dbb0bf24357f6916cc7c3602b8e8dc09f7eb777eee8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 18 Apr 2021 19:19:37 GMT
accept-ranges: bytes
content-length: 245
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 10 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (9977), with no line terminators Hash93390de20e5bd77d2c57eaa162f0e929 b8b8ed893fc06ca91c8d4271dd1fe412370d53d9 9c3a92340bbef1c6f2af7f4f6637626060efb4e47a05dbf097385830bbb10ad4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 9977
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudio-elements.min.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 12 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudio-elements.min.css?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (12438), with no line terminators Hash0ff735fab7a5992c38d243f567d27913 deee86cb285eab2fe1bf7d17b006919338c2ec21 8fde2e172adb5d17159cbcc473532544712df3785794f5809c524edb8280b043
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/css/lastudio-elements.min.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 12438
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/style.min.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 157 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/style.min.css?ver=1.0.0 IP185.148.47.88:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators Size157 kB (157380 bytes) Hash2c06887144d63aa4794ed972f6e8c672 47dd16d14faa0b1239d505305d7c35ce9661a9b6 8aaff491d64550c74d7f7b9627f3415c60bc6fd663449947a15a98756a691138
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/style.min.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 157380
content-type: text/css
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana-child/style.css?ver=1.0.0 | 185.148.47.88 | 200 OK | 800 B |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana-child/style.css?ver=1.0.0 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (326) Hashde0bd98f00cdeb16d75adb82bbaeacd8 744225b00940d0ef58aa422858770a7d620fb4a5 63636912ac780140f6a7061211ba0d4a2aa2c25d462cd4497f2309b490ced03a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana-child/style.css?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 07 Nov 2019 20:36:12 GMT
accept-ranges: bytes
content-length: 800
content-type: text/css
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 | 185.148.47.88 | 200 OK | 14 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 IP185.148.47.88:0
File typeASCII text, with very long lines (11272) Hasheaa8641bcda2371f4024a71fbb67de3b 0e46c39d3821683c856605a82254115f9a6a7792 0c5f584d1ea2c3313dc8c55824c2a572d3cf2eae87c5ca62a58e598aec9ddb5c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 24 Feb 2021 21:13:39 GMT
accept-ranges: bytes
content-length: 14229
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 185.148.47.88 | 200 OK | 11 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP185.148.47.88:0
File typeASCII text, with very long lines (11126) Hash79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:53:12 GMT
accept-ranges: bytes
content-length: 11224
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 | 185.148.47.88 | 200 OK | 90 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 IP185.148.47.88:0
File typeASCII text, with very long lines (65451) Hashb6f7093369a0e8b83703914ce731b13c d1889f5c173c2a4b20288f1f84758599afd346ef 60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:53:12 GMT
accept-ranges: bytes
content-length: 89496
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 | 185.148.47.88 | 200 OK | 122 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 IP185.148.47.88:0
File typeASCII text, with very long lines (42889) Size122 kB (121722 bytes) Hash09d0554a0e9a8751df4fb6bd4a984dc7 1b1c5e859b07c34c5a3e643eb40eab76bfc7b0c8 41d764db49ec1705c84b60b85bc505a0997616846bf4a8b52849bfcaf8d21909
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:57:12 GMT
accept-ranges: bytes
content-length: 121722
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 | 185.148.47.88 | 200 OK | 999 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 IP185.148.47.88:0
File typeASCII text, with very long lines (999), with no line terminators Hash6a0e8318d42803736d2fafcc12238026 c955314a7e0a9a9871329b0f042c8f0b5df49a78 2648a1333fa24d383fd73a6beaac17156ae78f4267ff7407ad60e05a788df44c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 19 May 2022 09:18:16 GMT
accept-ranges: bytes
content-length: 999
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/plugins.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 688 B |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/plugins.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (688), with no line terminators Hash995fe76ebfcb69b29f230c89370ae178 640c68a7b49d7ce6eb939b7bf2fddc76d4cad46c 96666ff0238c31561fd9dedf714e6d716f7e9358903bcf85231ba5039a4ac964
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/plugins.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 688
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/js.cookie.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 1.8 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/js.cookie.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (1619) Hash54dfb7dc77dfc33f028fee9a7909e989 36e2cb58503f59be4ff5b0701bbd2dd34933aa68 acf5fd2ccafd1468203ef4f08a3e4c1916cf1f92cd89224bb30a24b03b1ef71c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/js.cookie.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 1785
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/lastudio-sticky.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 3.4 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/lastudio-sticky.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (3378), with no line terminators Hash94d5f98bb2974c33646228ba15a6e21c ddef4f1efff2fef78afe0b06f34024b3f4914608 e2dd7d4393a7fd967c6e17e5940227af71275c322f94d9a0734a7f540c9ae2ca
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/lastudio-sticky.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 3378
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 | 185.148.47.88 | 200 OK | 9.7 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 IP185.148.47.88:0
File typeHTML document, ASCII text, with very long lines (9720), with no line terminators Hashcfb428c02811f0cbe515d5f3dca61de6 e95f8696fbe29a706e66ccf582b36d9bd650ab9f 679e44f9b4bbbc2ad0c4000c1413fd3a88627d83f1cba8ebdac26f81bc7edb78
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 19 May 2022 09:18:16 GMT
accept-ranges: bytes
content-length: 9720
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 | 185.148.47.88 | 200 OK | 335 kB |
URL HTTP/2www.healthpro.ai/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 IP185.148.47.88:0
File typeASCII text, with very long lines (64270) Size335 kB (334809 bytes) Hash9ec30981fbcfda87c9bc1f21eedd3964 771c2ae5446a934f0ad47ada2632e8d3a253359b 901640c8d3e8ab1178f574cb9b027343a135b08c19283e183adfed11dbb012b9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Dec 2020 06:57:12 GMT
accept-ranges: bytes
content-length: 334809
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/modernizr-custom.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 8.3 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/modernizr-custom.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (8115) Hasha1570a8a36bc944928b1c98af2a55493 9452b90783c6619bb515305debcc933411d5e1fc d95250e3642798743855c13172561392759bd09f15d79b58be7b09811ff629e8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/modernizr-custom.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 8337
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/pace.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 12 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/pace.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (12415), with no line terminators Hash669c30c677a6d77ccb2ad9a852ccec12 bd9b669f8d2130fcef3572058068637dd6f127d5 eaadb9b31059c183bd2da8374d63466a9f722bdb726f5e603c38cc44323b54c0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/pace.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 12415
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/featherlight.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 9.2 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/featherlight.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (9194), with no line terminators Hashfb44ab9e069d301e35313565a0729b5c 2c6b707e3be34650bda5eb05c35d24f7d00877d5 3659554b808b052e2ba0ac8cbc792c1e9cb233ff910e3a6f4c0e2e1e2763f70a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/featherlight.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 9194
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/slick.min.js | 185.148.47.88 | 200 OK | 44 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/lib/slick.min.js IP185.148.47.88:0
File typeASCII text, with very long lines (43724), with no line terminators Hashda0fb9e7b072e1969757e7361fb1726c 47a104247da2f8738ecfe7cf6fab3c469af9fdb8 815800f1cadf86785a85f906b8df8b029afa8641836f0cec108bf1fd37cc0292
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/lib/slick.min.js HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 43724
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/app.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 67 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/app.min.js?ver=1.0.0 IP185.148.47.88:0
File typeASCII text, with very long lines (65536), with no line terminators Hashb9472cb2571897381f2527fa5bfc42af e905f836c1ba982216a665505b1ba38fa476461b f323586e9bd0145919dccfe678ba8ad660a9822b2229d426aa169aa1b979fb79
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/app.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 66837
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 | 185.148.47.88 | 200 OK | 99 kB |
URL HTTP/2www.healthpro.ai/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 IP185.148.47.88:0
File typeUnicode text, UTF-8 text, with very long lines (34729), with NEL line terminators Hash5090bae2c114802440412e301bdf5174 3850afd52816ee686eccd881df06764b426cd86a d36e5d7328268d21c6941039a7b6a15c7ed7414f60dbee72d2231d11ac9bdaf3
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:24:36 GMT
accept-ranges: bytes
content-length: 99310
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5638
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:13:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5638
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:13:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5638
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:13:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5638
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:13:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash73b0059a5671ff189dccdeb345c3dfb6 89a89effe4d8e12b478b3abb9ae5e94a861d957d 673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5638
Expires: Sat, 15 Oct 2022 11:47:42 GMT
Date: Sat, 15 Oct 2022 10:13:44 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af2b9dc-3279-48a4-b300-2aca0a094dd4.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af2b9dc-3279-48a4-b300-2aca0a094dd4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3ac5c50f8ffe0da11f1adb9f67d811cf 2b586d1c26208d6fe7df3a4cec286e28f21807ca 12414dcf4afa766503c9328fe626c2d1317a0d6838887e0dd30e9b56e85ea3d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af2b9dc-3279-48a4-b300-2aca0a094dd4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8120
x-amzn-requestid: 42dc2299-203a-4269-a252-e239978fe80d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7EhLHX0IAMF89g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347813a-1357899758d9403e4b920418;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SR9bGKLTWYUWOjUddaTyA7fGSnBR5GqVPYKC6-1Zn-uHPoQkEW5TfQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 04:05:53 GMT
age: 22071
etag: "2b586d1c26208d6fe7df3a4cec286e28f21807ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash319cbf11bba3f159e5c9f606deded924 13f29acb7a694030fc2de0b42c0d95c4be49deb7 09aa7d94e4829f4daf33d5e2aed077afcc59628839c5d6e877172e8455879062
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15855
x-amzn-requestid: 6cd31f4a-e8b2-4258-9b64-2fad83a606c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3ekFH1-IAMFTDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6346114d-5fd284f41be669a972e84ed4;Sampled=0
x-amzn-remapped-date: Wed, 12 Oct 2022 00:58:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4PfJD4ZyH4fg4H6C1kQK_MHuWp4DdzA768vaMNt98y3_hKwkFbIpYg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 05:07:49 GMT
age: 18355
etag: "13f29acb7a694030fc2de0b42c0d95c4be49deb7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a3b2ace-090c-4763-8c3d-485b06c6db7f.jpeg | 34.120.237.76 | 200 OK | 4.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a3b2ace-090c-4763-8c3d-485b06c6db7f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe1c7702a6206faeb2ca8f81c15ad37ff a63ad4f69b8f59f00cf06e06096488bc10af9d74 392e67ad7cc5ee65f30cab488861ccd06770cd1230814095185f81e895d5000e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a3b2ace-090c-4763-8c3d-485b06c6db7f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4205
x-amzn-requestid: c94a4ce7-f219-4473-93f6-fdb6c506dbe0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7EhLGItoAMFy4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347813a-6cbcef6d3dd353dd21bb6080;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XZ7TmppwJQ-7gnH6VPsmH8MD-dvh9wruvlk2nIKln68ZRsPgJRPQkg==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 04:24:26 GMT
age: 20958
etag: "a63ad4f69b8f59f00cf06e06096488bc10af9d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg | 34.120.237.76 | 200 OK | 6.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash902f6b585d65d720ff096817ca1f2233 9b73cbeff3361c30600bea9f12a862ae2c4f1e01 8669095b4abaab1bbe1a9f65eb61e7caf713c36f8a24ed0979f482bb3356b79c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6454
x-amzn-requestid: 4774f611-4ee1-40e7-804b-229bfff6c5a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjS3MGmdoAMFqKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfe94-451518b50ab53f2538d0c13f;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 22:00:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2Ra0AP60Ts4OidLByrMWpcUixuPQZGP8QliETUca6vdyqZfO9oxGDQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:51:09 GMT
age: 44555
etag: "9b73cbeff3361c30600bea9f12a862ae2c4f1e01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381d4399-366b-4b96-82f3-a169f67436ed.jpeg | 34.120.237.76 | 200 OK | 6.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381d4399-366b-4b96-82f3-a169f67436ed.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashedc4bd5b0644d34cfa4777e12c7ca3bf 73a4d828dba62ec16a563ee419de3b22b34b2441 714d33f5df235af9e4ba86db83b15fe60f70097e6958db01049ff38996f94a3e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381d4399-366b-4b96-82f3-a169f67436ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6541
x-amzn-requestid: f6ff9c7e-0481-414b-9d38-51324dba88bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aA6iGE8coAMFtYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6349d7a6-2a6cd8ed535fd76773cf1217;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 21:41:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: a6iCp9mqc6SQyfHbVDEQHe3_xdROG_QW9xHq7l3XH2XziJa6HPqgQw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:49:18 GMT
age: 44666
etag: "73a4d828dba62ec16a563ee419de3b22b34b2441"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash54edb9ab897821172fc13756df376ee7 2010f9656d87e6f5220f131628c537720c3673e1 6694c1be0adf97fa77d1bfa29337d9e609b729a58d42e141e9bb55ed6367b1d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13261
x-amzn-requestid: dd760e09-701e-4956-9723-386edc97c694
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z0fH6FzIoAMFzJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6344deff-197cf4f048e146af5654d0bd;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 03:11:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FG87tXqLw2s9wd8SpMNGbYzroLHz4inDaCGnUMOUKhvEqSvqfBwR4A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 04:55:49 GMT
age: 19075
etag: "2010f9656d87e6f5220f131628c537720c3673e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioBrands.woff2 | 185.148.47.88 | 200 OK | 14 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioBrands.woff2 IP185.148.47.88:0
File typeWeb Open Font Format (Version 2), TrueType, length 13524, version 1.0\012- data Hash1c4d8ecf6a969f976a8c030656fdf9e1 cff829d6409a4ced99fac5fbb2b20183c6aee796 68c4f0faa3d5eff1eb015b1e2816ff249f29335ec888e3f9d92f7ce3491d73a6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/fonts/LaStudioBrands.woff2 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 13524
content-type: font/woff2
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioIcons.woff2 | 185.148.47.88 | 200 OK | 11 kB |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/fonts/LaStudioIcons.woff2 IP185.148.47.88:0
File typeWeb Open Font Format (Version 2), TrueType, length 10648, version 1.0\012- data Hash67288a5133d3ef3d93610f8d22292b07 fb43c7199b68edb5904bfbba3088b660db600268 fed81968cb3054aa313ffd326a83b57a14b9ab3d65216f62cc02b5b4a4ede3d3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/fonts/LaStudioIcons.woff2 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.healthpro.ai/wp-content/themes/mgana/assets/css/lastudioicon.min.css?ver=1.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 10648
content-type: font/woff2
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashacaba5d27d27f0ebeb1a1495a6e4ff09 5953b351f69fd15de1b4d42dd9634dea8f6e920b 023cd9eaaee884f8cb91ed69805e308b42d2aaf48be2e3788e33dd95a501410f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js | 142.250.74.163 | 200 OK | 160 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (608) Size160 kB (159789 bytes) Hash1230a090d5cedcb9e764406ab9497c1b 3d175bcf4ad9957c3e32611713c01347299b173e 585cafe3d6a3b932804aaa5aeb19a650688a2c15767f513d0d60c1941475c428
GET /recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.healthpro.ai
Connection: keep-alive
Referer: https://www.healthpro.ai/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 159789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Oct 2022 16:47:25 GMT
expires: Fri, 13 Oct 2023 16:47:25 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Oct 2022 20:02:07 GMT
content-type: text/javascript
age: 149179
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashacaba5d27d27f0ebeb1a1495a6e4ff09 5953b351f69fd15de1b4d42dd9634dea8f6e920b 023cd9eaaee884f8cb91ed69805e308b42d2aaf48be2e3788e33dd95a501410f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 10:13:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.healthpro.ai/ensl/modeuadaersrlenco | 185.148.47.88 | 404 Not Found | 59 kB |
URL HTTP/2www.healthpro.ai/ensl/modeuadaersrlenco IP185.148.47.88:0
Hashb6b37216689b281a69005044f9c2e67e e2cb02242af5240588fe5b1521b96077c3944f57 ec7882cee3f5bd48d23451cd5c248d6ce9d24413a15eee18207a5add4ddac791
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /ensl/modeuadaersrlenco HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
referrer-policy: origin-when-cross-origin
feature-policy: accelerometer 'self'; autoplay 'self'; camera 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; payment 'self'; usb 'self'
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.healthpro.ai/wp-json/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
date: Sat, 15 Oct 2022 10:13:42 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-192x192.png | 185.148.47.88 | 200 OK | 7.7 kB |
URL HTTP/2www.healthpro.ai/wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-192x192.png IP185.148.47.88:0
File typePNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data Hashb6e4a1405d84d7faa609a37287dd72c3 12884b0cb36b48a9682012a2dedbe7d5e26edf6a 97f21a875ed5c6261c85ccd49a5a62f88021dfb8019ad6dc7b9170ced0d8aec2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/01/cropped-Orignal-Logo-File-04-e1579380196972-192x192.png HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 12 May 2020 03:18:06 GMT
accept-ranges: bytes
content-length: 7718
content-type: image/png
date: Sat, 15 Oct 2022 10:13:44 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Oct 2022 12:31:58 GMT
expires: Sun, 08 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 596507
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 14 Oct 2022 00:48:31 GMT
expires: Sat, 14 Oct 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 120314
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-regular-400.woff2 | 104.17.24.14 | 200 OK | 13 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-regular-400.woff2 IP104.17.24.14:0
File typeWeb Open Font Format (Version 2), TrueType, length 13224, version 331.-31196\012- data Hashb91d376b8d7646d671cd820950d5f7f1 13517529affa39e2585c591acae6dc336b6aa917 e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca
GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.healthpro.ai
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Oct 2022 10:13:45 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 13224
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "613fa20b-33a8"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3655432
expires: Thu, 05 Oct 2023 10:13:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NBoBQJgA9nGo8Yo1v54Y4HIRGl6BDNS5F%2FYQpDMTG%2Fsa8a9P1i1a2J0Z%2BosqEFkMXjUUhTogzHbfEUxfneSWvchLsIVH0Z%2F6K0DbjWctB2MvJBmpjd%2FoedHVG%2BZNERsx%2FEtPeudr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75a7c8ae88b21c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 | 185.148.47.88 | 200 OK | 0 B |
URL HTTP/2www.healthpro.ai/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 IP185.148.47.88:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=07c01f92f8cc36c71e58a8ad0fb8639d&ver=5.7.7 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 20 Sep 2022 20:00:39 GMT
accept-ranges: bytes
content-length: 317213
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-admin/admin-ajax.php?action=buttonizer&qpu=5033ae58cd32785e4ce5f6d186c0eef9&preview=0 | 185.148.47.88 | 200 OK | 0 B |
URL HTTP/2www.healthpro.ai/wp-admin/admin-ajax.php?action=buttonizer&qpu=5033ae58cd32785e4ce5f6d186c0eef9&preview=0 IP185.148.47.88:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-admin/admin-ajax.php?action=buttonizer&qpu=5033ae58cd32785e4ce5f6d186c0eef9&preview=0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=63072000; includeSubDomains
content-type: application/json; charset=UTF-8
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/themes/mgana/assets/js/header-builder.min.js?ver=1.0.0 | 185.148.47.88 | 200 OK | 0 B |
URL HTTP/2www.healthpro.ai/wp-content/themes/mgana/assets/js/header-builder.min.js?ver=1.0.0 IP185.148.47.88:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /wp-content/themes/mgana/assets/js/header-builder.min.js?ver=1.0.0 HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 03 Oct 2020 07:36:06 GMT
accept-ranges: bytes
content-length: 16854
content-type: application/javascript
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.healthpro.ai/wp-content/uploads/2020/01/Orignal-Logo-File-01-e1579380120621.png | 185.148.47.88 | 200 OK | 0 B |
URL HTTP/2www.healthpro.ai/wp-content/uploads/2020/01/Orignal-Logo-File-01-e1579380120621.png IP185.148.47.88:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/01/Orignal-Logo-File-01-e1579380120621.png HTTP/1.1
Host: www.healthpro.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.healthpro.ai/ensl/modeuadaersrlenco
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Tue, 12 May 2020 03:18:06 GMT
accept-ranges: bytes
content-length: 72116
content-type: image/png
date: Sat, 15 Oct 2022 10:13:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|