| www.athensheartcenter.com/crm/cgi-bin/lnm.exe |  209.17.116.163 | 301 Moved Permanently | 175 B |
URL User Request GET HTTP/1.1www.athensheartcenter.com/crm/cgi-bin/lnm.exe IP209.17.116.163:80 ASN#19871 NETWORK-SOLUTIONS-HOSTING
File typeHTML document, ASCII text, with CRLF line terminators Hashca1ce3399a1abab6d52988a51f3b4307 3ceee27f1294f8d1cc213aa461cad2d2ed706cea 5eb0dfd23b6a6bc58ff93d6e8c61b6418d58fec61e55fa70ee2135a23db3f628
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile |
GET /crm/cgi-bin/lnm.exe HTTP/1.1
Host: www.athensheartcenter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: openresty/1.25.3.1
Date: Thu, 25 Apr 2024 16:19:13 GMT
Content-Type: text/html
Content-Length: 175
Connection: keep-alive
Location: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
|
|
| www.ahcspc.com/crm/cgi-bin/lnm.exe | 18.221.113.15 | 404 Not Found | 130 kB |
URL User Request GET HTTP/1.1www.ahcspc.com/crm/cgi-bin/lnm.exe IP18.221.113.15:443
CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeHTML document, ASCII text, with very long lines (52237), with CRLF, LF line terminators Size130 kB (130471 bytes) Hashab52331c01ba7acaed61b0d856cc3c14 374a4e6c01dbf67fd8f69eaf2509977607458347 61ab4e959d4c31b20e1155c575311e8951d18f96eedac4d8cb2fc27ddecbba94
GET /crm/cgi-bin/lnm.exe HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 25 Apr 2024 16:19:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.ahcspc.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| fonts.googleapis.com/css?family=Inter%3A400%2C600%7CPoppins%3A700%2C600%7CRoboto%3A400%2C700&display=fallback&ver=4.6.8 | 142.250.74.74 | 200 OK | 1.9 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Inter%3A400%2C600%7CPoppins%3A700%2C600%7CRoboto%3A400%2C700&display=fallback&ver=4.6.8 IP142.250.74.74:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash4be640621f88a7517fdf12e7092042e8 19ef5c6c03f8e471e208794bd9c8a6f74e7df349 51a7994e844d99e21e62509a72946d984073adf9297a76dc71227ae91b9f50dc
GET /css?family=Inter%3A400%2C600%7CPoppins%3A700%2C600%7CRoboto%3A400%2C700&display=fallback&ver=4.6.8 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 16:19:14 GMT
date: Thu, 25 Apr 2024 16:19:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ahcspc.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.6.8 | 18.221.113.15 | 200 OK | 8.4 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.6.8 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (40662) Hashae655a1bac47a0d3a242e2a0d499e26e fe2c0a4bfbb694029091075d2037d2a2102d823b 2e8b7afb3c2a338ea58cd2dad5727372288c112d1d281cb9058434bffdffb675
GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.6.8 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Fri, 15 Mar 2024 19:13:21 GMT
ETag: "a75c-613b7cd21ba66-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8404
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 | 18.221.113.15 | 200 OK | 14 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (57196) Hash0234d0a7685aefa6fd06041fbd602928 cbcba60aa82286dd1f877cb8bd5b5cc047f82ce0 0085adfd2d08a45f62a06d8f3f969ddc4a94ebe8d226511db90aa038f11ed180
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Wed, 31 Jan 2024 17:43:42 GMT
ETag: "1ae43-610416b762761-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14501
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 | 18.221.113.15 | 200 OK | 4.6 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (16214) Hasha2431bc290cf34e330e11ec4cfce1247 32a53342901fef5f4f4dbb26a555e730f84437a4 c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196
GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "4057-61621ddb54af5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4583
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/uploads/elementor/css/post-59.css?ver=1713184797 | 18.221.113.15 | 200 OK | 363 B |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/elementor/css/post-59.css?ver=1713184797 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (1108), with no line terminators Hash606cfe1cd442c07d3b9727895ae60f45 6b798b429ea0edb1acae9ec120578e4a641a3cd2 c236e449db7b0b056f6c0b75d0cfdae6a542ee93ffe5bc66aade2cd853cde547
GET /wp-content/uploads/elementor/css/post-59.css?ver=1713184797 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:39:57 GMT
ETag: "454-61621eb43934d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 363
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/uploads/elementor/css/global.css?ver=1713184797 | 18.221.113.15 | 200 OK | 2.0 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/elementor/css/global.css?ver=1713184797 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (11502) Hashfdb2f8098015c2c488f70a9502be21b2 3483114bbcbfd9dc989f912ad3a03dba38abb729 79fed0c5aa0811271bd7ab17b72e1505f40cecab95731b2e6f35b1a8a182e8f4
GET /wp-content/uploads/elementor/css/global.css?ver=1713184797 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:39:57 GMT
ETag: "5aeb-61621eb46eeae-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1966
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=4.6.8 | 18.221.113.15 | 200 OK | 424 B |
URL GET HTTP/1.1www.ahcspc.com/wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=4.6.8 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (882), with no line terminators Hash5977bc137ec15b2c85598f484fbd73f8 752019275fbebf785cb8352d73e54dde5ba934ea a3c948a216530521f3cd0575e075c9f20308f610a9d2e0e2499f5c5ef30f58f9
GET /wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=4.6.8 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Fri, 15 Mar 2024 19:13:21 GMT
ETag: "372-613b7cd219b26-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 424
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.27 | 18.221.113.15 | 200 OK | 323 B |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.27 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
Hasha5bf64d5859ee94a3e8e93d592d6d2a0 049eb63b42dbb820b06870a430f523bf06880721 25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.27 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:38:59 GMT
ETag: "308-61621e7d8c1be-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 323
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/uploads/elementor/css/post-425.css?ver=1713184797 | 18.221.113.15 | 200 OK | 1.3 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/elementor/css/post-425.css?ver=1713184797 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (12251), with no line terminators Hash8ebaacc7dca4eeb9a678cd6156496a56 04144d85bf934379629ec38780d56a7b7ba40343 ff6b2d8ae4fa29c1d4abc9134c2de6f43a345623a71e143385cf07a6b1144caf
GET /wp-content/uploads/elementor/css/post-425.css?ver=1713184797 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:39:57 GMT
ETag: "2fdb-61621eb496f4e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1299
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.15 | 18.221.113.15 | 200 OK | 948 B |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.15 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (3757) Hash328ebfd01781de6fe0f18f59ca04861c 334fea12d6d0d4de5f19f0f1db467b444b0d67c3 0bc32c16a963f587d3d0d69da37f1ddf1269221fc7df0907f420624614ab2963
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.15 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Wed, 10 Apr 2024 09:21:59 GMT
ETag: "eae-615ba92162826-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 948
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 18.221.113.15 | 200 OK | 14 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 06 Nov 2023 21:18:18 GMT
ETag: "3509-609826492ba80"
Accept-Ranges: bytes
Content-Length: 13577
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.21.0 | 18.221.113.15 | 200 OK | 14 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.21.0 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (65496) Hash5f7b6b4cd4216e6d198fb4159de975a8 f5ccd4daac4d17451cf9ff1e3bf408ded1087e47 1a98cb33919e4802c83a8db3026beb2f04d62672a614fa16e4d4f02b6da20900
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.21.0 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "1d0a1-61621ddb28bd5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13914
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.27 | 18.221.113.15 | 200 OK | 7.8 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.27 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeUnicode text, UTF-8 text, with very long lines (1646) Hashb46c6c561749d353ded2332c13a5e8eb 4c5ad91ccb661a5e48f9c502c06b326878f4f715 6f708315ec1e5f14fcf831768764aad338d6507ac1e5f11c155c820487052544
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.27 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:38:59 GMT
ETag: "1284f-61621e7d8e0fe-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7798
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.ahcspc.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.6.8 | 18.221.113.15 | 200 OK | 22 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.6.8 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (21646), with no line terminators Hash3a60a32a9971a0c306ad201c2a4f29ad e6afee5a51d5ee26653332b4813b0849c1429d95 ba8baa9e210bbd7de7f146126d6831f6ab3c7fbaf57d5691dc998eea4eb1499a
GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.6.8 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Fri, 15 Mar 2024 19:13:21 GMT
ETag: "548e-613b7cd21ba66"
Accept-Ranges: bytes
Content-Length: 21646
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 | 18.221.113.15 | 200 OK | 12 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (11513), with no line terminators Hashefc27e253fae1b7b891fb5a40e687768 ad12044651ffac0badcd0e42f32edef91678b1ff 46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Thu, 28 Mar 2024 13:32:24 GMT
ETag: "2cf9-614b88db2ad1a"
Accept-Ranges: bytes
Content-Length: 11513
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 | 18.221.113.15 | 200 OK | 13 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (13054), with no line terminators Hash917602d642f84a211838f0c1757c4dc1 392df3fb4b0ec96ce4ebb5616e6b2a5c55a54bf8 d702e5ed1e573918d912775ac1e88987fc177aa51efe1253a08f71ab54f96516
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Thu, 28 Mar 2024 13:32:24 GMT
ETag: "32fe-614b88db2ad1a"
Accept-Ranges: bytes
Content-Length: 13054
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 | 18.221.113.15 | 200 OK | 8.2 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (8171), with no line terminators Hashdda652db133fddb9b80a05c6d1b5c540 60c8514c57a5db2980c4b046b0dd479bd427357b c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 06 Nov 2023 21:18:18 GMT
ETag: "1feb-609826492ba80"
Accept-Ranges: bytes
Content-Length: 8171
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 | 18.221.113.15 | 200 OK | 6.6 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (6625), with no line terminators Hashfd7ef2e4737acd74fd0dcdc3b515e304 0d792b33f12a48ee8aaaf2560a63a5682470645b 1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Thu, 07 Dec 2023 15:37:14 GMT
ETag: "19e1-60bed3df67584"
Accept-Ranges: bytes
Content-Length: 6625
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 18.221.113.15 | 200 OK | 115 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators Size115 kB (115127 bytes) Hash9a98016751e498c06d434cc022ca1a44 6aa9af5fe436eab9c313de9f0bea072c04637624 da9ed5720b674f0d297fe621ac2d8d518c4e622bef1e9b0d4ae489dee9aa43f8
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Thu, 07 Dec 2023 15:37:14 GMT
ETag: "1c1b7-60bed3df67584"
Accept-Ranges: bytes
Content-Length: 115127
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca | 18.221.113.15 | 200 OK | 498 B |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (463) Hashb0b80b0256874e70acdc820b52bbf1aa 9aace9a7989736bf535d65f229d0c10e9acea41b 166c7c3bb5f76f977a9f2a5490589b3466374eb2b3f064802e56f08bad71fbf0
GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 06 Nov 2023 21:18:18 GMT
ETag: "1f2-609826492ba80"
Accept-Ranges: bytes
Content-Length: 498
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 18.221.113.15 | 200 OK | 88 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Thu, 07 Dec 2023 15:37:14 GMT
ETag: "15601-60bed3df60824"
Accept-Ranges: bytes
Content-Length: 87553
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=06758d4d807d9d22c6ea | 18.221.113.15 | 200 OK | 6.6 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=06758d4d807d9d22c6ea IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (6581), with no line terminators Hash60d72450a6829bb918b07075e6273d16 fad4e52c06b86b8df6a4220707aad9c01ff74f7e 4a8bd33bfe771e0bd46fade45435a9fa2d0c3a8af2409b1f5a74a6b96b03faa9
GET /wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=06758d4d807d9d22c6ea HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Wed, 10 Apr 2024 09:22:03 GMT
ETag: "19b5-615ba925cb6af"
Accept-Ranges: bytes
Content-Length: 6581
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.15 | 18.221.113.15 | 200 OK | 10 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.15 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (10287), with no line terminators Hash8456ff924afc1c7b79f8e9c61d4edb50 69381f72090b4a2b76385dcbe86a5ce33a042820 bc9ce60ecd8ad81f4255baec05cee96d4a32f484f1cc6975e11ac87a5de667f2
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.15 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Wed, 10 Apr 2024 09:21:59 GMT
ETag: "282f-615ba921702e6"
Accept-Ranges: bytes
Content-Length: 10287
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0 | 18.221.113.15 | 200 OK | 5.0 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (4957) Hashd4611b146b41aa47d51076a0d3798082 6bb95b45dfc5379953c39fe6c56322350be95411 25ca7abf6b5b9becd0676818fde2d3b374badcff7867f95dbcbfebeac59a24c0
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "1385-61621ddb47035"
Accept-Ranges: bytes
Content-Length: 4997
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0 | 18.221.113.15 | 200 OK | 63 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (63224) Hash5ccc4763017ac61801706d50d27dcfef 3e5977aebc5292aea4592a35763fde8cd96ac2b5 88a55f2f63b0693a5e880094799388b608eb0a80f666a7e8460f2ac82e7b3da5
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "f721-61621ddb402d5"
Accept-Ranges: bytes
Content-Length: 63265
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 18.221.113.15 | 200 OK | 12 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (12198), with no line terminators Hash3819c3569da71daec283a75483735f7e ecd40a5cc6f0b76200c454ca880210dc301cfab8 214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "2fa6-61621ddb54af5"
Accept-Ranges: bytes
Content-Length: 12198
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.4.4 | 142.250.74.74 | 200 OK | 23 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.4.4 IP142.250.74.74:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hashc62d75e515007ce8dbce11e405fe7411 722f49e4c94ff173a5478ab6fda44782062312bf 443874d9c052cdbbe13205826f64fed03e241817286bd22df36c10e9edcf88ca
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.4.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 16:19:14 GMT
date: Thu, 25 Apr 2024 16:19:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.ahcspc.com/wp-content/uploads/2024/02/long-Red-1-1.png | 18.221.113.15 | 200 OK | 2.5 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/2024/02/long-Red-1-1.png IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typePNG image data, 199 x 88, 8-bit colormap, non-interlaced Hash045701062536987e9cd741c743223f8b 369bfcde19412c73d2edb688745f4c8b82fda90b 7dbbc22f44a91b8092008b66ed9dd30b2cf03d75edef726b82b414b7b60b9a3c
GET /wp-content/uploads/2024/02/long-Red-1-1.png HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Wed, 03 Apr 2024 16:44:50 GMT
ETag: "9b3-61533f0efabe8"
Accept-Ranges: bytes
Content-Length: 2483
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.ahcspc.com/wp-content/uploads/2024/04/AHC-new-logo.png | 18.221.113.15 | 200 OK | 4.9 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/2024/04/AHC-new-logo.png IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typePNG image data, 162 x 72, 8-bit colormap, non-interlaced Hash632d0bab01237f287aa86ecc6ea8101b 312f5fc11a548a94cbe80d1cc7167a1aa1d4ce1d c63d050304b67bfb290dd740826980657ea50451d98d3d79219b73f74b4b4dfd
GET /wp-content/uploads/2024/04/AHC-new-logo.png HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Wed, 03 Apr 2024 16:18:40 GMT
ETag: "12f8-615339365aaca"
Accept-Ranges: bytes
Content-Length: 4856
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 172297
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:23:47 GMT
expires: Tue, 22 Apr 2025 16:23:47 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 258928
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 13:20:56 GMT
expires: Fri, 25 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
age: 10699
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:14:19 GMT
expires: Wed, 23 Apr 2025 07:14:19 GMT
cache-control: public, max-age=31536000
age: 205496
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 22:05:29 GMT
expires: Sun, 20 Apr 2025 22:05:29 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 411226
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:14:19 GMT
expires: Wed, 23 Apr 2025 07:14:19 GMT
cache-control: public, max-age=31536000
age: 205496
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0 | 18.221.113.15 | 200 OK | 40 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (39932) Hashe89cb5dd5e3b9e2abe2170cc33b94f3f c2b27aae073c0c6beab34f829b3b2615a2b0d56b ebd07e134eaa69ff679725da56a465facafc8a09c61ef8bf42ceead8f79f6562
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "9c24-61621ddb3f335"
Accept-Ranges: bytes
Content-Length: 39972
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 224684
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ahcspc.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js | 18.221.113.15 | 200 OK | 1.4 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeJavaScript source, ASCII text, with very long lines (1320) Hashb667dbc895223efab2d7cd4b524d83d6 b60bdf5d62426ce539da53ed135baeb6fa3ea975 96b8cb5f676cdf0fccb5a1002bb23b854477d8ade4f71b2e6438bd7bbcee2a86
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 15 Apr 2024 12:36:09 GMT
ETag: "550-61621ddb450f5"
Accept-Ranges: bytes
Content-Length: 1360
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| widget-v4.tidiochat.com//tururu.mp3 |  104.26.9.139 | 206 Partial Content | 7.2 kB |
URL GET HTTP/2widget-v4.tidiochat.com//tururu.mp3 IP104.26.9.139:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeMPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural Hash5061b4d134a7b4d5d744f9a127b757a8 c5e240ac60d3914cb3836ba6652105c67720b845 12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f
GET //tururu.mp3 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Thu, 25 Apr 2024 16:19:15 GMT
content-type: audio/mpeg
content-length: 7224
last-modified: Wed, 03 Apr 2024 07:39:35 GMT
etag: "660d07b7-1c38"
expires: Thu, 25 Apr 2024 05:33:23 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1248352
content-range: bytes 0-7223/7224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yyootEhsw9pmt3yC8WV1A%2BndwoqEZu0OqYTJ2alqOEyS2X7DlaNhbGBNYUxgaBM8iYzRS2gbSAR7p9tqPhlfwftRtXqhL%2FPMXi2r1qupCRnCGLl7n%2FeC2k2CAFjb85ipkknyvxCtt3sy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fa757abd0b518-OSL
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 | 104.26.9.139 | 200 OK | 27 kB |
URL GET HTTP/2widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 IP104.26.9.139:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 27400, version 1.0 Hashd96e6550e1c6b3063f60875bfd4a0870 c1b22f0d075bd4413686866134fffcccb3f487b8 577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8
GET /fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:19:15 GMT
content-type: font/woff2
content-length: 27400
last-modified: Mon, 22 Apr 2024 07:40:06 GMT
etag: "66261456-6b08"
access-control-allow-origin: *
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J5buQBZT0FtjHdPtat4BjPOKyOC5ZFh3ecH2xaOqv%2FjnEjgh4W5oJvY0xCiI1q0rrgffv4sGp9EVPk9udHVYBb4BN6iaP8bkKYaJEqenzigzsuatZyObcPaUtns5ATwf7uDwMVu58XIY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fa7578badb518-OSL
X-Firefox-Spdy: h2
|
|
| www.ahcspc.com/wp-content/uploads/2023/12/truered-81w.webp | 18.221.113.15 | 200 OK | 2.8 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/2023/12/truered-81w.webp IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash72d47fe507bb4cb27bafabd2f3325d7a f2ec53554921cedb9b10d4be709471f069b67846 f55dad13e75eb54b3d1522d2fdd06aabd76f33085c0845f890e25592c66c9b89
GET /wp-content/uploads/2023/12/truered-81w.webp HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 11 Dec 2023 02:39:02 GMT
ETag: "af4-60c32d63f5ff3"
Accept-Ranges: bytes
Content-Length: 2804
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/webp
|
|
| www.ahcspc.com/wp-content/uploads/2023/12/truered-81w.webp | 18.221.113.15 | 200 OK | 2.8 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/uploads/2023/12/truered-81w.webp IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash72d47fe507bb4cb27bafabd2f3325d7a f2ec53554921cedb9b10d4be709471f069b67846 f55dad13e75eb54b3d1522d2fdd06aabd76f33085c0845f890e25592c66c9b89
GET /wp-content/uploads/2023/12/truered-81w.webp HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 11 Dec 2023 02:39:02 GMT
ETag: "af4-60c32d63f5ff3"
Accept-Ranges: bytes
Content-Length: 2804
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/webp
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/widget.ab0ffde36be6aa7a153d.js | 104.26.9.139 | 200 OK | 168 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/widget.ab0ffde36be6aa7a153d.js IP104.26.9.139:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size168 kB (168054 bytes) Hash04e4f17e19865c645f118d7cbea33cb3 d4860056288ca338de22f67f84d5457cf36fc3a5 69db969f017b237bf909e05cfc9a8b5fac05a5363f17888651bafb818a7e651c
GET /1_223_0/static/js/widget.ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:19:15 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-7b531"
cache-control: max-age=691200
cf-cache-status: HIT
age: 2120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dZte42ebxq8hpbP8GH1BDDdhboZfKwdUau72YcWcrqpBgMXfDo%2B3xXT7jPdAPlofWyZK8fA%2BLbDZdwOoL5KmV0pVuUDi0NTqleY8tkdxyu4ktszhsbXnvrO3obc%2B9YrsNBBulHcySeof"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879fa7580c27b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| socket.tidio.co/socket.io/?ppk=smdpfias0amceu7sayjjdxoxkmkx8l32&device=desktop&EIO=3&transport=websocket |  34.250.113.112 | | 0 B |
URL socket.tidio.co/socket.io/?ppk=smdpfias0amceu7sayjjdxoxkmkx8l32&device=desktop&EIO=3&transport=websocket IP34.250.113.112:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?ppk=smdpfias0amceu7sayjjdxoxkmkx8l32&device=desktop&EIO=3&transport=websocket HTTP/1.1
Host: socket.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.ahcspc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zqVOfrnlfB6uaVEqgmrkHA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 25 Apr 2024 16:19:16 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 05sFgYKuCHTNgd6vGWKxeqraH3k=
|
|
| widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 | 104.26.9.139 | 200 OK | 27 kB |
URL GET HTTP/2widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 IP104.26.9.139:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 27400, version 1.0 Hashd96e6550e1c6b3063f60875bfd4a0870 c1b22f0d075bd4413686866134fffcccb3f487b8 577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8
GET /fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ahcspc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:19:16 GMT
content-type: font/woff2
content-length: 27400
last-modified: Mon, 22 Apr 2024 07:40:06 GMT
etag: "66261456-6b08"
access-control-allow-origin: *
cache-control: max-age=691200
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mxGF5t2XRHz81EVYiWcPriHyou9StiVJKLx9xqr5mRbX8MIyW8kMbB8W02F3esP0gfBUDRs6KaAkyCn2ThIcjT49MS3qsca%2B0IuStSbY6fKzduJcTQd5GnQXECheFnDUyQf9VynksdB%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fa75c1fc3b518-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/twemoji/12.1.1/72x72/1f44b.png | 104.17.25.14 | | 1.2 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/twemoji/12.1.1/72x72/1f44b.png IP104.17.25.14:0
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash8c685a701d36f492ecc566a4c879fbfd bbfb15f5fdfd47a20122556975dba73b9d035d95 dfee1561c6e59c90f7a292f90157bae85f75ccb3ae27b655898a51429e3a8910
GET /ajax/libs/twemoji/12.1.1/72x72/1f44b.png HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:19:16 GMT
content-type: image/png; charset=utf-8
content-length: 1224
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fdd6306-505"
last-modified: Sat, 19 Dec 2020 02:18:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 68321
expires: Tue, 15 Apr 2025 16:19:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dv9xIYGy2gmJ4kSr1eDOJOCHDsJkEuRUfewyg5V6kF2oy8%2BsFSw5BA%2FIzIqaAqQHBqFfxBMFTfuPMZIMF3fP77V6In5nDaifyqxjKR0gXV4NInMjNqcxFpioRCvlDzImf6ONE%2Fzd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879fa75dac700b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js | 104.26.9.139 | 200 OK | 136 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js IP104.26.9.139:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size136 kB (135504 bytes) Hash7fa608633b72035d3cd311e9b2da2463 0aa843c5ea71d4143c92109acfc5b5cc18afea82 5262e3f73f35616febd13fbe6feee14613d076774ff644e48489f7cd6694a8dc
GET /1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:19:16 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-775a9"
cache-control: max-age=691200
cf-cache-status: HIT
age: 2122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T1VMVgl7EVoKB1vsiKc%2Ba1vmYLPKDHrmSjxKpsIErcQw%2Bt76YVfXqFQDlE1KCcCTt6tnzUXjMRhW8E0QNrDNXtwcc%2FTUx9gqwuiXBvl3%2B3XpSJiyzGRCPSF%2F5clBoMKu782M8VpIKvcP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879fa75aee9cb518-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.ahcspc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 | 18.221.113.15 | 200 OK | 2.9 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
File typeASCII text, with very long lines (3172), with no line terminators Hash4ff394b4fc55e546c2457e1a49a044fa 0f3fe404c0821a795cb73aa6bb5c062d52af7e68 4858dafdb763b5027e97ca50c5747329e16d4c19ecc575aff7454335e71cba33
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:14 GMT
Server: Apache
Last-Modified: Thu, 28 Mar 2024 13:32:24 GMT
ETag: "b4e-614b88db29d7a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1015
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 18.221.113.15/wp-content/uploads/2024/03/Home.svg | 0.0.0.0 | | 0 B |
URL GET 18.221.113.15/wp-content/uploads/2024/03/Home.svg IP0.0.0.0:0
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/03/Home.svg HTTP/1.1
Host: 18.221.113.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| socket.tidio.co/socket.io/?ppk=smdpfias0amceu7sayjjdxoxkmkx8l32&device=desktop&EIO=3&transport=websocket | 34.250.113.112 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1socket.tidio.co/socket.io/?ppk=smdpfias0amceu7sayjjdxoxkmkx8l32&device=desktop&EIO=3&transport=websocket IP34.250.113.112:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerAmazon Subjecttidio.co Fingerprint98:9E:BA:DC:FE:5D:11:F4:A3:32:E0:6C:3C:07:32:AA:D4:ED:7F:03 ValidityMon, 19 Feb 2024 00:00:00 GMT - Thu, 20 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?ppk=smdpfias0amceu7sayjjdxoxkmkx8l32&device=desktop&EIO=3&transport=websocket HTTP/1.1
Host: socket.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.ahcspc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zqVOfrnlfB6uaVEqgmrkHA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 25 Apr 2024 16:19:16 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 05sFgYKuCHTNgd6vGWKxeqraH3k=
|
|
| www.ahcspc.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 18.221.113.15 | 200 OK | 21 kB |
URL GET HTTP/1.1www.ahcspc.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP18.221.113.15:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerLet's Encrypt Subjectahcspc.com Fingerprint1C:C3:4E:5A:28:9B:8B:D1:6B:4A:74:1C:E4:B5:2E:CE:7A:2A:61:E6 ValiditySun, 21 Apr 2024 04:39:26 GMT - Sat, 20 Jul 2024 04:39:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.ahcspc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/crm/cgi-bin/lnm.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 16:19:15 GMT
Server: Apache
Last-Modified: Mon, 06 Nov 2023 21:18:18 GMT
ETag: "53be-609826492ba80"
Accept-Ranges: bytes
Content-Length: 21438
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| code.tidio.co/smdpfias0amceu7sayjjdxoxkmkx8l32.js | 104.26.9.183 | 302 Found | 5.2 kB |
URL GET HTTP/2code.tidio.co/smdpfias0amceu7sayjjdxoxkmkx8l32.js IP104.26.9.183:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidio.co Fingerprint61:0E:8C:BE:A0:2C:8F:5E:3E:47:BB:36:BE:3E:FE:1F:F2:7B:68:89 ValiditySat, 16 Mar 2024 23:33:33 GMT - Fri, 14 Jun 2024 23:33:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smdpfias0amceu7sayjjdxoxkmkx8l32.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ahcspc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 16:19:15 GMT
content-type: text/html
location: https://widget-v4.tidiochat.com/1_223_0/static/js/render.ab0ffde36be6aa7a153d.js
cache-control: public, s-maxage=300, max-age=0
widget-cache-status: HIT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16MsrLjmq6JULqNpsK%2B%2BLDlhiNzkIr7F6r6%2FZZC3os8w63EmiyOyzg4r%2B%2Fsuz5BUyONYyCQLyx7Upk%2BcFBlVcPkHBxaDzXHafIjjspo3JAevwTCKpwi6af2JJr6kpZI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fa7567a03568b-OSL
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/render.ab0ffde36be6aa7a153d.js | 104.26.9.139 | 200 OK | 5.2 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/render.ab0ffde36be6aa7a153d.js IP104.26.9.139:443
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (5371), with no line terminators Hash35f3cacc7e8353851f1319f97fec4a71 83dedb443f33dd2c3349157b1c493cd51b1b3bf3 48d9f0b1c9668fc80788ea3263a765724dee18c29fba8bc713016781bfe42180
GET /1_223_0/static/js/render.ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ahcspc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:19:15 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-1472"
cache-control: max-age=691200
cf-cache-status: HIT
age: 2203
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bsi4K%2B2jmgqD6BlIJoMzRvKSy3hUzWa8Hye4uk%2B1AyAeGXorFLDiKkziOc7lECvqf2wa%2BzxHHFozt6%2B2NI%2BgQKasci16OddnuWR3OSqt6m1V%2FLIdO59Zc4IY%2FWmVQDpxifPL7OA3gdX7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879fa7571b3ab518-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 18.221.113.15/wp-content/uploads/2024/03/Vector-1.svg | 0.0.0.0 | | 0 B |
URL GET 18.221.113.15/wp-content/uploads/2024/03/Vector-1.svg IP0.0.0.0:0
Requested byhttps://www.ahcspc.com/crm/cgi-bin/lnm.exe
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/03/Vector-1.svg HTTP/1.1
Host: 18.221.113.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|