| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10888
Expires: Wed, 01 Feb 2023 23:55:03 GMT
Date: Wed, 01 Feb 2023 20:53:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash7e05c8461bd2dc5a149f71e2c465ea29 705983959c887e243cb55a8a1796757b579ee977 4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12415
Expires: Thu, 02 Feb 2023 00:20:30 GMT
Date: Wed, 01 Feb 2023 20:53:35 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 20:43:26 GMT
content-type: application/json
age: 609
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash09ee4b0fe6cf4ca5ed31b24452338d00 7e62b6e20f0d4737f4a8d94f9818a0883027839e 56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4824
Expires: Wed, 01 Feb 2023 22:13:59 GMT
Date: Wed, 01 Feb 2023 20:53:35 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PqxN1Xv5O8RNfz0xVq7xx7Nz6oyZk1z/A8pIsbUumR5hBBN+diebUB/x6bN/NjWp/dB0HTgWEPM=
x-amz-request-id: ZWVXNXRW37NA7VDM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 20:22:48 GMT
age: 1847
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 20:53:35 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/ | 131.153.100.222 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www.montereycountyclinicservices.org/ IP131.153.100.222:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Set-Cookie: _icl_current_language=en; expires=Thu, 02-Feb-2023 20:53:35 GMT; Max-Age=86400; path=/
_icl_current_language=en; expires=Thu, 02-Feb-2023 20:53:35 GMT; Max-Age=86400; path=/
Content-Type: text/html; charset=UTF-8
Location: https://www.montereycountyclinicservices.org/
Content-Length: 0
Date: Wed, 01 Feb 2023 20:53:35 GMT
Server: LiteSpeed
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 20:49:05 GMT
age: 270
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash8913af0be619500295008bb91f506660 a7b8068ba9aa506205a295b24458c2616997a0d1 6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7019
Expires: Wed, 01 Feb 2023 22:50:34 GMT
Date: Wed, 01 Feb 2023 20:53:35 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 34.215.56.181 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.215.56.181:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QDmVuxcH84blHqBH7Vv+WQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9Tx1A/h7b83wLcQewhKBi1pg5XE=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashde49044c9365e16fec3a6d361cb94728 2b7b69c16de6fda1ae5206f92fe781ee07bd182a 6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashde49044c9365e16fec3a6d361cb94728 2b7b69c16de6fda1ae5206f92fe781ee07bd182a 6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector.css?v=3.4.1.1 | 131.153.100.222 | 200 OK | 851 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector.css?v=3.4.1.1 IP131.153.100.222:0
File typeASCII text, with very long lines (4495) Hashd01a59aa07dee3e7af049b9bf54bf8c8 309c487d56d91cbfb70031d0a1e9163a5f8127c7 22aa7effb912686f041638475677d69c2d6a1e5e8119495bb43cfb166817e852
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector.css?v=3.4.1.1 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 851
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js?ver=1.9.1 | 142.250.74.106 | 200 OK | 33 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js?ver=1.9.1 IP142.250.74.106:0
File typeASCII text, with very long lines (32086) Hash430e927c980ad4079de727fa59dd93f2 891aaada9a55a91292999f6d50fd300439905982 e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
GET /ajax/libs/jquery/1.11.1/jquery.min.js?ver=1.9.1 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
date: Wed, 01 Feb 2023 20:53:36 GMT
expires: Thu, 01 Feb 2024 20:53:36 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-106909800-1 | 142.250.74.40 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-106909800-1 IP142.250.74.40:0
File typeASCII text, with very long lines (1759) Hash517fa7a9901781d604ab9ceaee922dab 65e3ee4d39f1caa05113a77d47af4f0ae9600d81 d160bf98a289204976a90ccdfb897e5ac112f730e9c460bd7fff9c940eddb801
GET /gtag/js?id=UA-106909800-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 20:53:36 GMT
expires: Wed, 01 Feb 2023 20:53:36 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 19:28:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43954
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashde49044c9365e16fec3a6d361cb94728 2b7b69c16de6fda1ae5206f92fe781ee07bd182a 6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashde49044c9365e16fec3a6d361cb94728 2b7b69c16de6fda1ae5206f92fe781ee07bd182a 6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Lato:300,400,400italic,500,700 | 142.250.74.106 | 200 OK | 896 B |
URL HTTP/2fonts.googleapis.com/css?family=Lato:300,400,400italic,500,700 IP142.250.74.106:0
Hashe1e127f316a2239507a84fbc31411340 589a78ab24e28fd9b9c6b0ad02e8b0457adeb6d6 665fc5667b2ebc7b3a5cb683f173ee4446a1b20d937eff88d5310730b758d57c
GET /css?family=Lato:300,400,400italic,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Feb 2023 20:53:36 GMT
date: Wed, 01 Feb 2023 20:53:36 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/style.css?v=2 | 131.153.100.222 | 200 OK | 13 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/style.css?v=2 IP131.153.100.222:0
File typeUnicode text, UTF-8 text, with very long lines (65315) Hashd125f2301abbbbdd1824d3eb0489b61d 3f34d4f625de6026639c6daba63df3ac43fa6188 b6db6a848d218cd81e1d40777204b20f92d885287fe3054e8dca93785a3107af
GET /wp-content/themes/mdh/style.css?v=2 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13360
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/js/modernizr.js | 131.153.100.222 | 200 OK | 5.2 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/js/modernizr.js IP131.153.100.222:0
File typeHTML document text\012- HTML document, ASCII text, with very long lines (11759) Hash62542a5ce9732e7d27d1407d25a4820e 508b8e23dca904cc2d122a47719b3483a8c49752 77aad53d7e722449c809d3876c0cede5a96e8a977d724a53c7f5a812ff565e2b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/mdh/js/modernizr.js HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5202
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector-click.css?ver=4.9.22 | 131.153.100.222 | 200 OK | 448 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector-click.css?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with very long lines (1746) Hashb505391b98fd0c3abe532f070656b863 1a07904aa4b366534972796c582e2c998905a3e8 1891782e87582688c399fabbe3e903995654e29de12cce8fd41e667f9ae8291a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/sitepress-multilingual-cms/res/css/language-selector-click.css?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 448
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.6.1 | 131.153.100.222 | 200 OK | 528 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.6.1 IP131.153.100.222:0
Hash4abea1302038a73bc417986f2a8aed90 883e5b78e58740a49fde04e948ffccaf27e57787 dae10f21b48f748734aaf38d4c416eaf88d816279dc8e92bc8baf559b400064a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.6.1 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 528
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/jquery-collapse-o-matic/light_style.css?ver=1.6 | 131.153.100.222 | 200 OK | 352 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/jquery-collapse-o-matic/light_style.css?ver=1.6 IP131.153.100.222:0
File typeASCII text, with CRLF line terminators Hash40154b6b6ec51ceb1cab588cbbbc937a c1eb97f04d1b31955687ed75ed76ec24242c0110 b402f1dd2b0c9e4dcb04547f320e5497da46baf1973ce08913b24bc3a67cbd53
GET /wp-content/plugins/jquery-collapse-o-matic/light_style.css?ver=1.6 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 352
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/responsive-lightbox/assets/tosrus/css/jquery.tosrus.all.css?ver=1.7.2 | 131.153.100.222 | 200 OK | 1.9 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/responsive-lightbox/assets/tosrus/css/jquery.tosrus.all.css?ver=1.7.2 IP131.153.100.222:0
File typeASCII text, with very long lines (349) Hash3c5f2ae83cf2e621d4144547d82db0b5 a79fd80a8d97d5c35c8b993a92dcc565008e2148 b38161c781ceb1801dabc2253191bc50f722819d1e05e357b79e813b08a62385
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/responsive-lightbox/assets/tosrus/css/jquery.tosrus.all.css?ver=1.7.2 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1928
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/front/css/style.css?ver=4.9.22 | 131.153.100.222 | 200 OK | 87 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/front/css/style.css?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with CRLF line terminators Hashe7a2102e936fd204eb18784eb24b3d0d c51071cfd47a261d978f82dce945c6be6ad536c3 91d5523928e601def6791d663ba1c4813deafa36f0ce89f6a78bd73a21760717
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/tabs/assets/front/css/style.css?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-length: 87
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/global/css/tabs.themes.css?ver=4.9.22 | 131.153.100.222 | 200 OK | 525 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/global/css/tabs.themes.css?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with CRLF line terminators Hash9c3f8211e394619e898a62f31b51f937 0d4c4d52d6a377938d328aacffd20946b16f78e7 d311f8444f9b70151ea29ed44557168a901c802dfaf0b0f179033aae30cd448b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/tabs/assets/global/css/tabs.themes.css?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 525
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/front/css/responsive-tabs.css?ver=4.9.22 | 131.153.100.222 | 200 OK | 191 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/front/css/responsive-tabs.css?ver=4.9.22 IP131.153.100.222:0
Hashda6ec61cb6e2dbfe67342e9f3026441f 0b8525d86b7f41f118550aa6432e2abfb4c32aa1 a3378c1cfca4d7922b542b6bce73746aae5cc9ea2d8b0e2696b467bd501fa74d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/tabs/assets/front/css/responsive-tabs.css?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 191
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/global/css/font-awesome.css?ver=4.9.22 | 131.153.100.222 | 200 OK | 5.0 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/global/css/font-awesome.css?ver=4.9.22 IP131.153.100.222:0
File typetroff or preprocessor input, ASCII text, with very long lines (305) Hash6a9a3f6bce2dfc4e892c98f7a46c65f3 acb515ae3a8c6132c8747ebb65db7b247ed86af8 8243b6a448ab95cad162820189ab0579d1e64a83c0486868b3fc97951633b517
GET /wp-content/plugins/tabs/assets/global/css/font-awesome.css?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5011
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/aurora-heatmap/style.css?ver=1.5.6 | 131.153.100.222 | 200 OK | 2.0 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/aurora-heatmap/style.css?ver=1.5.6 IP131.153.100.222:0
Hash3abd2ae295d6abfe705d4e9df399e465 0d5e23246ad488667b1347af2420ea7949249359 d1ce6a383130720b9692c6d46efe0095b5fadf117d8edcbddc5ad73b49b05b7d
GET /wp-content/plugins/aurora-heatmap/style.css?ver=1.5.6 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: text/css
last-modified: Wed, 28 Dec 2022 21:43:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2035
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/front/js/jquery.responsiveTabs.js?ver=4.9.22 | 131.153.100.222 | 200 OK | 5.8 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/tabs/assets/front/js/jquery.responsiveTabs.js?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with very long lines (2237), with CRLF line terminators Hash81d0614570384d2506e1c3b5428bf7bf f5b39c3bee00a2c236c5d277ded77cb6dd212464 8e79bcd3bdf5c83a116b9830670b2408a3725864ee571bd61a9ad27fabeff071
GET /wp-content/plugins/tabs/assets/front/js/jquery.responsiveTabs.js?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5755
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/aurora-heatmap/js/reporter.js?ver=1.5.6 | 131.153.100.222 | 200 OK | 2.9 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/aurora-heatmap/js/reporter.js?ver=1.5.6 IP131.153.100.222:0
Hash70e6b044923f6f2c7970ff31a6b1fdce 337322a49f7026841de8907c85989e62484b62d0 276ecc4cbd20e7b5c3544cdd2aaca62cb20606b4362e9350263e4105d737dd03
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/aurora-heatmap/js/reporter.js?ver=1.5.6 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 21:43:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2917
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3 | 131.153.100.222 | 200 OK | 17 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3 IP131.153.100.222:0
File typeASCII text, with very long lines (33237) Hash315a5aa4fcf89e9d292ce4c956effcae e959aec23ecb46c315f6d176fafb240e0c3219d3 ac16a343a29beb8da79c00551173cf2c46e6260edb03930f96dcd2c6ca81b236
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:36 GMT
content-type: application/javascript
last-modified: Tue, 17 Mar 2020 01:45:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16942
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash42d54c8c12a2f90c448a11bf42800e86 bb66d35435411c825bfcd0a091f33b7d1708191e 3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 | 216.58.207.227 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data Hash716309aab2bca045f9627f63ad79d0bf 38804233a29aaf975d557fe14e762c627bef76e0 115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.montereycountyclinicservices.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 10:58:24 GMT
expires: Thu, 01 Feb 2024 10:58:24 GMT
cache-control: public, max-age=31536000
age: 35712
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash42d54c8c12a2f90c448a11bf42800e86 bb66d35435411c825bfcd0a091f33b7d1708191e 3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 20:53:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.montereycountyclinicservices.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 04:29:08 GMT
expires: Wed, 31 Jan 2024 04:29:08 GMT
cache-control: public, max-age=31536000
age: 145468
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 | 216.58.207.227 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Hashde69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.montereycountyclinicservices.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 10:25:03 GMT
expires: Mon, 29 Jan 2024 10:25:03 GMT
cache-control: public, max-age=31536000
age: 296913
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data Hashefee2d080d7bebdd2e0aeb2e030813a0 f8d38f9f9584e48c2e469877ebd94232265585f1 bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.montereycountyclinicservices.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:31 GMT
expires: Fri, 26 Jan 2024 21:48:31 GMT
cache-control: public, max-age=31536000
age: 515105
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2893
Expires: Wed, 01 Feb 2023 21:41:50 GMT
Date: Wed, 01 Feb 2023 20:53:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2893
Expires: Wed, 01 Feb 2023 21:41:50 GMT
Date: Wed, 01 Feb 2023 20:53:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2893
Expires: Wed, 01 Feb 2023 21:41:50 GMT
Date: Wed, 01 Feb 2023 20:53:37 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2998f7f50ac0eec931c348e8a0fb0c60 f5e411cda74cb7fb4a662f4787e9543b9749c8b5 0c81413a819e379212bf757b1c9469415aec2ac8fdf47f94ff23c420a1da20e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 64EbarGrn6AIpXOE8TIfiBeGFQinx-P9lUIvmiQ1ivZgFrxl7_W4EQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:57:42 GMT
age: 82555
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71bb87d4-a329-46af-946e-9b5edda7dddb.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71bb87d4-a329-46af-946e-9b5edda7dddb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2419bbbf287e620325438f5620183e32 257963245f14742bf9cd90e71ca748066d5495c3 47c7495be97a81189da17fc3abf430d1f4ecae95fdda30006cc462a4cea4c643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71bb87d4-a329-46af-946e-9b5edda7dddb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7628
x-amzn-requestid: 29c70d62-ed3a-4c90-8f32-2dc0c1caf5e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcDSnG4RIAMF5eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4b276-0267c928110be13d26906bed;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 05:28:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nW57-OyTmJaehRAaQAG-qljKRd2_tDViGnSn8Pj_z8xndH_oVnE8pQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 04:57:03 GMT
age: 57394
etag: "257963245f14742bf9cd90e71ca748066d5495c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash27e95b7912edc909d6b031e36fe83534 eb27fae0bb17dbe0929a620002195233ef50c1d0 b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:53:10 GMT
age: 46827
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3366ef4f8733cb9c89a5c88f63a0a441 7da46843b6d885f38a4759a08e6c899906ab7b97 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 22:03:43 GMT
age: 82194
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4bb3a6fba496d54cdbbccaf2b9600386 8e30002699e9fbf2047f9ac11a36d2175fc9c591 927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:15:18 GMT
age: 49099
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashec7e808a5e82552c46c3417a5b32b836 f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd f16d982224dfeb0753eaf9d4eb87d80fd1111f682fd8fa36f3177aad5bf926a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6819
x-amzn-requestid: a0368695-4182-40bd-9a28-c50ae783a7a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRHGnoAMF0Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-624285eb16110b8c2360dec5;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4MpUHqMYJoNA7QuRuQwbJIodNkhizq6EL5SPbIoSKFQjtoAKQgLuEg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:25 GMT
age: 82932
etag: "f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/images/translate-icon.png | 131.153.100.222 | 200 OK | 1.3 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/images/translate-icon.png IP131.153.100.222:0
File typePNG image data, 20 x 16, 8-bit/color RGBA, non-interlaced\012- data Hashebaaf44d9cc67044bb24070700479c40 c30abd6f8115f82f184892a54763a36cc43c34f3 e4543d7f23d8d363a6bd5f65d091d702a8d6baf0d3f56f348f6e508973db7a94
GET /wp-content/themes/mdh/images/translate-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 1290
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/images/mdh-logo.png | 131.153.100.222 | 200 OK | 47 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/images/mdh-logo.png IP131.153.100.222:0
File typePNG image data, 741 x 125, 8-bit/color RGBA, non-interlaced\012- data Hashc7b9a243b8a97afc23cb11564388cdcc 955181f8cd4a1e92bd54759acd330b4e9763fd0a 7669aaf14a961cf724ac12e0583215739bdf076167a8745e5b30d2a91c557291
GET /wp-content/themes/mdh/images/mdh-logo.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 47350
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/images/translate-icon-light.png | 131.153.100.222 | 200 OK | 1.3 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/images/translate-icon-light.png IP131.153.100.222:0
File typePNG image data, 20 x 16, 8-bit/color RGBA, non-interlaced\012- data Hashc6e856c35639aa28dd9990829d2e84e8 60a9e42ad60c8e506132f08201cabd33b398934f a8b2fdac6882c69b9d200a00af405e694cdac8552973ac3104b9498015e9ce10
GET /wp-content/themes/mdh/images/translate-icon-light.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 1277
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/uploads/2019/12/mychart-icon.png | 131.153.100.222 | 200 OK | 5.1 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/uploads/2019/12/mychart-icon.png IP131.153.100.222:0
File typePNG image data, 88 x 83, 8-bit/color RGBA, non-interlaced\012- data Hash8c843542a3a330c178bfa50b3ecd682e b4624666d0cd640494d7b80861e84e06de104b35 6d85a90df090efc94714d070fd298a807fbea70a16b250e352bcd547ef517340
GET /wp-content/uploads/2019/12/mychart-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 20 Dec 2019 17:46:36 GMT
accept-ranges: bytes
content-length: 5058
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/uploads/2019/12/appointments-icon.png | 131.153.100.222 | 200 OK | 3.1 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/uploads/2019/12/appointments-icon.png IP131.153.100.222:0
File typePNG image data, 83 x 79, 8-bit/color RGBA, non-interlaced\012- data Hash4b694952972ca52ce422835979f3f4b2 907f7c2543000679469913b4eb0521388a0f218a 99d48d266aa2a58df63a67aa1235fc10c73e9afe116f7531c32cbebc08e6348a
GET /wp-content/uploads/2019/12/appointments-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 20 Dec 2019 17:47:06 GMT
accept-ranges: bytes
content-length: 3069
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/uploads/2019/12/health-icon.png | 131.153.100.222 | 200 OK | 5.9 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/uploads/2019/12/health-icon.png IP131.153.100.222:0
File typePNG image data, 53 x 96, 8-bit/color RGBA, non-interlaced\012- data Hash234a2dcef0371feffeb16c266ebb4bbd 62c22d3aa94279e8a5230aa9f1e9ea10f9e913af 6daec8c40f9c24fb10f61350191d2849e84a8eb921583802a7fd6ee8d687b371
GET /wp-content/uploads/2019/12/health-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 20 Dec 2019 18:08:32 GMT
accept-ranges: bytes
content-length: 5932
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/uploads/2019/12/location-icon.png | 131.153.100.222 | 200 OK | 6.3 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/uploads/2019/12/location-icon.png IP131.153.100.222:0
File typePNG image data, 79 x 81, 8-bit/color RGBA, non-interlaced\012- data Hash1b1db949cfbd09751d98f6f7d3f43c56 c21fdd31193bfedcc643e7d8a59ea57d84d3555b c8e8912dc26a3e5f1ae520380c265c334dacb27afd8992611d9e890d35f139ff
GET /wp-content/uploads/2019/12/location-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 20 Dec 2019 17:47:46 GMT
accept-ranges: bytes
content-length: 6306
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/uploads/2016/05/tipimage-400x312.jpg | 131.153.100.222 | 200 OK | 19 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/uploads/2016/05/tipimage-400x312.jpg IP131.153.100.222:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 400x312, components 3\012- data Hash9216fc64455c7ec355165401a5f619a2 51e8c93b3189969dabe84ec50447d79c98d4e698 f36eef8ebc7d421bb4a598b3a80d2360acd360b52b8e951664d32fae9efbf669
GET /wp-content/uploads/2016/05/tipimage-400x312.jpg HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/jpeg
last-modified: Fri, 31 May 2019 22:02:38 GMT
accept-ranges: bytes
content-length: 18953
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/images/facebook-icon.png | 131.153.100.222 | 200 OK | 1.1 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/images/facebook-icon.png IP131.153.100.222:0
File typePNG image data, 33 x 36, 8-bit/color RGBA, non-interlaced\012- data Hash7aedcc77be4f5838ecf6984a321bffd2 7cb6bd0db0e66c40e1fe3b1b991ac02750600eb7 e64b66be266a2417d53d6e1072672b6132bdd3d441b1d4c03058d2dca1f74187
GET /wp-content/themes/mdh/images/facebook-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 1118
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/images/twitter-icon.png | 131.153.100.222 | 200 OK | 1.3 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/images/twitter-icon.png IP131.153.100.222:0
File typePNG image data, 33 x 36, 8-bit/color RGBA, non-interlaced\012- data Hashd51f226895893fcbb5ae279f8cbec02f 8fcbe401c771951bf4ade06fa6cf9ef6aa03f644 fa016fb3f34181b4796acd6521a466a84e47b5bc679fce477bbaa135cbb74809
GET /wp-content/themes/mdh/images/twitter-icon.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 1347
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/images/mcc-badge.png | 131.153.100.222 | 200 OK | 23 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/images/mcc-badge.png IP131.153.100.222:0
File typePNG image data, 103 x 103, 8-bit/color RGBA, non-interlaced\012- data Hash668c1966a65ce582318ad5215b730733 932c22ef66b00f9ff0e5dcf916791b4ebd010248 758de81b070c45044bf76a693fe77c69e661ac383b167d8aad202087f0ad8cd3
GET /wp-content/themes/mdh/images/mcc-badge.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 22723
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/js/plugins.min.js?v=28 | 131.153.100.222 | 200 OK | 17 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/js/plugins.min.js?v=28 IP131.153.100.222:0
File typeUnicode text, UTF-8 text, with very long lines (32009) Hashb3feb2c8337357a35c1ca462d534475d 6111bb6356d273735023acc823c26c887ff46d41 0640f7b55412a2022c5bdfc5e63c581a965ca06a7539818f0942e663080fef17
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/mdh/js/plugins.min.js?v=28 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 17361
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/js/site.js?v=2.1 | 131.153.100.222 | 200 OK | 2.8 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/js/site.js?v=2.1 IP131.153.100.222:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2240) Hashac4cdd4df22b0703dc385b6b5e16597f 9e2a0deebcb96f881fc4b7e709fdd783853fa788 f0261db0dd0e9a80b7ce99433a8d11662536964cc987155ccaa4072c285b8752
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/mdh/js/site.js?v=2.1 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2787
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/js/language-selector.js?ver=3.4.1.1 | 131.153.100.222 | 200 OK | 1.4 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/js/language-selector.js?ver=3.4.1.1 IP131.153.100.222:0
File typeASCII text, with very long lines (2243) Hashb74227e58c8cb74af033e399c5eb0f7c bb7859f661bc1466bf09346c2bff373101643bd4 30cda89635ae2c7a03a26a0b4612942b1c7939032e85f760844345dd0ff79536
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/language-selector.js?ver=3.4.1.1 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1432
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 131.153.100.222 | 200 OK | 6.7 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 IP131.153.100.222:0
File typeASCII text, with very long lines (17137) Hash95d81b4509367ab2408811b6630f9d36 40f2f45cee3d8623257de3cb1b3f218de6904b7f 1e8997441d45729b3e3124b5b89eab4487252fcab4072871c707d80ba7140299
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6711
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6.1 | 131.153.100.222 | 200 OK | 4.3 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6.1 IP131.153.100.222:0
File typeASCII text, with very long lines (2237) Hash83d34dc98c7283c42c506c303176e0e3 38d8ee58770c63d74c20cbaef73bb664c5f306d7 435d31c322853fdc8ad98ec8ac74a6f45e8fbb4ffa1b52d7f0ab09b544b4227b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6.1 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4259
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.6.5 | 131.153.100.222 | 200 OK | 5.0 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.6.5 IP131.153.100.222:0
File typeASCII text, with very long lines (2237) Hashae485137fd976c73be6fd1110a1127fa 3c49d492cd2ddc2366eb0df6aef76ccd6b16c26f 242386f3bccd568c5a3227730f1f71f8b233efe6f7be65103f7c8d29eb37c3a3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.6.5 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4967
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/responsive-lightbox/assets/tosrus/js/jquery.tosrus.min.all.js?ver=1.7.2 | 131.153.100.222 | 200 OK | 7.2 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/responsive-lightbox/assets/tosrus/js/jquery.tosrus.min.all.js?ver=1.7.2 IP131.153.100.222:0
File typeASCII text, with very long lines (10334), with CRLF, LF line terminators Hashd3b45344c15081e4a71056ad1a23f8e0 37bc0f686252979035ae282b2acfbde53465f0e9 42f79eab0eba1bd859baf71107c805bc8f87a430ed7cd046bc55a18ce7799aff
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/responsive-lightbox/assets/tosrus/js/jquery.tosrus.min.all.js?ver=1.7.2 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7171
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/responsive-lightbox/js/front.js?ver=1.7.2 | 131.153.100.222 | 200 OK | 4.8 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/responsive-lightbox/js/front.js?ver=1.7.2 IP131.153.100.222:0
File typeASCII text, with very long lines (2251) Hash2105bfd575b44ad234e7105868aec5b4 921e6c5a57472d36b88f18a9144d96aff469bad1 ac92526e3285d196847e8341d855c65a3d8199381772ab425174e384636efdbc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/responsive-lightbox/js/front.js?ver=1.7.2 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4805
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-includes/js/wp-embed.min.js?ver=4.9.22 | 131.153.100.222 | 200 OK | 1.8 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-includes/js/wp-embed.min.js?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with very long lines (3628), with no line terminators Hashd87788408552fb9cb0ccf9eca2519da1 1f8b545dc9121524e93a2d13aeef0410a314f0df d4c8b75a01ef20776df53bf291b73df6e9ca1e809d4db5bdad1807d5a21c4202
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-embed.min.js?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 16 Apr 2021 01:22:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1784
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/js/sitepress.js?ver=4.9.22 | 131.153.100.222 | 200 OK | 1.3 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/plugins/sitepress-multilingual-cms/res/js/sitepress.js?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with very long lines (2237) Hash36a6e013eb07e349d3189a1a021c501d b9c2cb55b57902392f2db908de0ae958f3e00bd9 7420045ecf0d9da572043d30636971d057c59ba799bece7f0ae12c25e7d29a52
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/sitepress.js?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 31 May 2019 22:02:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1310
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-includes/js/wp-emoji-release.min.js?ver=4.9.22 | 131.153.100.222 | 200 OK | 5.2 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-includes/js/wp-emoji-release.min.js?ver=4.9.22 IP131.153.100.222:0
File typeASCII text, with very long lines (9063) Hashd0c96f6eef723330ce7d7c1600f8912c 6c1594d3cc53ab8dc864bd326e5df2daff243abd a19889e31814d7d1ccb783cf48965c915268ee5ef4813d2e095c06940a3c2930
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.22 HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: application/javascript
last-modified: Fri, 16 Apr 2021 01:22:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5220
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/themes/mdh/fonts/mchdcs.ttf?y1w6ja | 131.153.100.222 | 200 OK | 16 kB |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/themes/mdh/fonts/mchdcs.ttf?y1w6ja IP131.153.100.222:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, cfmc \012- data Hash5d47d971c9a5ec3ba46a2b86cd747086 8f7d4af1828cd04ff00eaa3f475063b8084c93be 0afc7c1bd57dc6f04b9d56e17b1efbeeef52457467cf529d4376343c9b04b093
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/mdh/fonts/mchdcs.ttf?y1w6ja HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/wp-content/themes/mdh/style.css?v=2
Cookie: _icl_current_language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: font/ttf
last-modified: Fri, 31 May 2019 22:02:34 GMT
accept-ranges: bytes
content-length: 16256
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.14 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.14:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 01 Feb 2023 19:45:20 GMT
expires: Wed, 01 Feb 2023 21:45:20 GMT
cache-control: public, max-age=7200
age: 4098
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.userway.org/widgetapp/2023-01-27/widget_app_base_1674820526684.js |  185.76.9.16 | 200 OK | 38 kB |
URL HTTP/2cdn.userway.org/widgetapp/2023-01-27/widget_app_base_1674820526684.js IP185.76.9.16:0 ASN#60068 Datacamp Limited
Hashb9b00dd1feaa022aaec2b692a0612f48 adc28baf0e660fdf74f74b93489eed89a6f920e0 09119c8c0638047a049e91233f0ecc7df15e4f5b193b87916bdb04966fb780fd
GET /widgetapp/2023-01-27/widget_app_base_1674820526684.js HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 20:53:38 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Fri, 27 Jan 2023 11:58:37 GMT
etag: W/"1451597cfed7e81751f31e77b2025260"
cache-control: max-age=25920000, public
vary: Accept-Encoding
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: JS5F0-pofgb3x4sF6Y8uBIRaQhrkBF1Kd8EhlKMNRfyjR8QhA-vaEQ==
age: 198
x-accel-expires: @1700743303
server: CDN77-Turbo
x-77-nzt: AblMCQ0UaXD/ywoHAA
x-77-nzt-ray: c0a4cc287342eedf52d1da63687dd633
x-cache: HIT
x-age: 461515
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.userway.org/widget.js | 185.76.9.16 | 200 OK | 6.2 kB |
URL HTTP/2cdn.userway.org/widget.js IP185.76.9.16:0 ASN#60068 Datacamp Limited
Hash90d766fbe581e2d9f34499035a26d7d3 0e3e1af16b71147ce0540d8f0b74f85e9e57e353 87af305298d2aca0ea2817326e6fac2599de09f333ab78e116d69a0fe869eb50
GET /widget.js HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 20:53:38 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Fri, 27 Jan 2023 11:58:39 GMT
etag: W/"474e19c0d37064545a688a8e3e1a0477"
cache-control: max-age=3600, public
vary: Accept-Encoding
via: 1.1 feed293e4f35224252786d4d48fa601e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: Kr689rJv37LwdRzvyTn_Rtq4S-IxgUdj7fnSRzgHqnK5PhGhUkT9_Q==
age: 2256
x-accel-expires: @1675286352
server: CDN77-Turbo
x-77-nzt: AblMCQ0/Uy3/EggAAA
x-77-nzt-ray: c0a4cc287342eedf52d1da639a356914
x-cache: HIT
x-age: 2066
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/favicon-16x16.png | 131.153.100.222 | 200 OK | 1.1 kB |
URL HTTP/2www.montereycountyclinicservices.org/favicon-16x16.png IP131.153.100.222:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Hashc5626a99768879e40e60c45d49acd6c8 3a3a42eb4f8fbfaa0ae1446d247a8602161ae956 22e08cc4f15db3c1d4a5ea2793b3ea081c0401898ad52b8802343db6cab44c54
GET /favicon-16x16.png HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:38 GMT
content-type: image/png
last-modified: Fri, 31 May 2019 22:02:42 GMT
accept-ranges: bytes
content-length: 1070
date: Wed, 01 Feb 2023 20:53:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hashe63044d99ef71cfd864b5776c329a525 839a547a14ad97485549137456a36bbff2fb7b29 143feab08a6fefedb9b7c0048b6465f62e2ed9de04ae5e9c7a43b630cef47645
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 20:53:39 GMT
Last-Modified: Wed, 01 Feb 2023 19:57:44 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: K2s1Ssi6sHEI8fbA0IjKv0-Xg9q2orrRLZas8trcnO7v4_Ahkr9lUg==
Age: 3355
|
|
| api.userway.org/api/tunings/JLuH52883S | 52.25.254.107 | 200 OK | 930 B |
URL HTTP/2api.userway.org/api/tunings/JLuH52883S IP52.25.254.107:0
File typeJSON data\012- , ASCII text, with very long lines (930), with no line terminators Hashbe243ff49be4007cc1fe5bb6de09a7dc 806bc7cf4d87663b7e3634efb6ff86d5738747d5 b135f3c8d92b8d30caa9d5f4a2208c62b512194022bdd497a2fa784ae7a9c843
POST /api/tunings/JLuH52883S HTTP/1.1
Host: api.userway.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1459
Origin: https://www.montereycountyclinicservices.org
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 20:53:39 GMT
content-type: application/json; charset=utf-8
content-length: 930
x-service-version: uw-pr
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, PATCH, POST, DELETE
access-control-allow-headers: *
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
x-service-request-id: usrccdfee6d3a0d4f4
etag: W/"3a2-gGvHz02HZjt+NjTvtv+G1XOHR9U"
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/ | 131.153.100.222 | 200 OK | 0 B |
URL HTTP/2www.montereycountyclinicservices.org/ IP131.153.100.222:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
set-cookie: _icl_current_language=en; expires=Thu, 02-Feb-2023 20:53:35 GMT; Max-Age=86400; path=/; secure
_icl_current_language=en; expires=Thu, 02-Feb-2023 20:53:35 GMT; Max-Age=86400; path=/; secure
content-type: text/html; charset=UTF-8
link: <https://www.montereycountyclinicservices.org/wp-json/>; rel="https://api.w.org/", <https://www.montereycountyclinicservices.org/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 20:53:36 GMT
server: LiteSpeed
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.montereycountyclinicservices.org/wp-content/uploads/2019/12/Exterior-SFHC-back.jpg | 131.153.100.222 | 200 OK | 0 B |
URL HTTP/2www.montereycountyclinicservices.org/wp-content/uploads/2019/12/Exterior-SFHC-back.jpg IP131.153.100.222:0
GET /wp-content/uploads/2019/12/Exterior-SFHC-back.jpg HTTP/1.1
Host: www.montereycountyclinicservices.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Cookie: _icl_current_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 20:53:37 GMT
content-type: image/jpeg
last-modified: Thu, 12 Dec 2019 18:41:15 GMT
accept-ranges: bytes
content-length: 202204
date: Wed, 01 Feb 2023 20:53:37 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| cdn.userway.org/widgetapp/2023-01-27/locales/en-US.json | 185.76.9.16 | 200 OK | 0 B |
URL HTTP/2cdn.userway.org/widgetapp/2023-01-27/locales/en-US.json IP185.76.9.16:0 ASN#60068 Datacamp Limited
GET /widgetapp/2023-01-27/locales/en-US.json HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.montereycountyclinicservices.org
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 20:53:39 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Fri, 27 Jan 2023 11:39:56 GMT
etag: W/"0c4b53012957584c54e80867ff489590"
cache-control: max-age=25920000, public
via: 1.1 3529bf84e9522012233c3dd2a59fdfe8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: mrvIAKjTq3zw02QtmjfddKfC781O88rbqzQs9e_bcvaH5YRni_RsrQ==
age: 56
x-accel-expires: @1700740055
server: CDN77-Turbo
x-77-nzt: AblMCQ3tel7/fBcHAA
x-77-nzt-ray: c0a4cc287342eedf53d1da638df3b826
x-cache: HIT
x-age: 464764
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.userway.org/widgetapp/images/body_wh.svg | 185.76.9.16 | 200 OK | 0 B |
URL HTTP/2cdn.userway.org/widgetapp/images/body_wh.svg IP185.76.9.16:0 ASN#60068 Datacamp Limited
GET /widgetapp/images/body_wh.svg HTTP/1.1
Host: cdn.userway.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.montereycountyclinicservices.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 20:53:40 GMT
content-type: image/svg+xml
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, PUT, POST, DELETE
access-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type
access-control-max-age: 3000
last-modified: Fri, 13 Jan 2023 11:00:14 GMT
etag: W/"2ec2767a3bb93656fb9b75c893d7be75"
cache-control: max-age=25920000, public
via: 1.1 acf2dd107c5d6d9bebe3457b4f66431e.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: H63vQnKv-vxXtqjau29OuDfvuK3Hm4C_brayiLqFNlhc5_reAyFlXw==
age: 54
x-accel-expires: @1699529294
server: CDN77-Turbo
x-77-nzt: AblMCQ3riW//BpEZAA
x-77-nzt-ray: c0a4cc287342eedf54d1da630b057909
x-cache: HIT
x-age: 1675526
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|