healthcare medical

education learning

government public service

English

_gid

exp_csrf_token

exp_tracker

1782836988

_ga_G7RBM528QT

_gcl_au

Domain 'healthpointchc.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. Count 14 characters in 'healthpointchc' holding four vowels versus 10 consonants. Splitting it apart reveals three words: health, point, chc. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

params

site_id

csrf_token

keywords

query

gtrans

vote

html/0c/d4/0cd44dd4-d2f8-4a36-8e0d-ededbf3a307b.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist
base-uri 'self';object-src 'none';script-src 'report-sample' 'nonce-1VwN1rOzgHnPAl-oGrapxA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict
require-trusted-types-for 'script'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net *.facebook.net *.whatsapp.com *.whatsapp.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-6pe0ymvT' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://accounts.google.com https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com *.instagram.com https://accounts.google.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist
base-uri 'self';object-src 'none';script-src 'report-sample' 'nonce-iRhMAAQnCzYRu1mxYFHpGw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict
require-trusted-types-for 'script'

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:164:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:207:0

96f171604e284998042d56431b61046bf7fdc32fd29c5fa399702d03299a7966

3d16dfb2260be071500ef0ed39b98a6430300b55607056b95c0ce017b3c1d163

87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740

0d302e219973858e12cab7a5dec15cf3bba6a00a9574446cf4e01b98e217c02d

663a234c227ca74ac1b56f62732c4855afe0a2903f4bf28c8a6e6bf7c26d9175

e41b0fcc4be9f72eb9118ecf0081d926b4be354df209798f482ab667e7474735

7b66949f35c8f0cef95506daa7eeeb7f7f994466a25d845a689f8be544126cb7

27ab763d40f1f98f6d708b6a42628f4965e24154f8425c9db3751241cce56aef

eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9

fc790761edb79b954a5e6853774ed96db936a3729b78d4b72dad5e79ce395c54

81b02f42e7cce8b9d1419beba9ba3e41a75bf0c507a4eb2bf518c307c0d10215

6da94f9dedf0fbd2db71aebad451784c96f82ebb9bfb7b16d2eea2e8fa886f14

98818c11af57189015998b4033ac3c5115e780c14752295df37d672dee98b64c

5e9233b6f1bec91a1d31cf900a5c59145749a79598304b1957f1e8096856bd69

476961502744986081e82755dc5c78bb75c811d61811942ac3830a430674101b

1beb678630b48a42ed585c0bbec264042a0c2e8caa30a9816dfb388bbc7a3518

f51de2c128df3e3262ae6135023743ef400442be685dd6192205813556bcc84c

3fa0f6e2156d65866de7ff4ca4666f047a56648140a1ada5d964d0ab65277352

ac9dca321a7c80b20e054fd897d04b78dbd954264f5ac5c085bb1217275c5b87

6a7a97e629923dd2a732d693efa0f5a8110e3d445aac3c798ba65bd968a69236

2aa5ca0d4ceb22bd76918cdb71cd2b578fd630c4782b7c10fcd0a895887ef1af

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

404cab4ebe08c5890a4ede038ce8c082922b374b6ff72cca60e98095c71c0101

e10d74011cc5736578e2957666b19f5d34029594a805daf2bc8476bc4c0b60fc

4b1927f6de1835274f7ce3dea5294dd75043cb0a23ec9754d910d9715dedc826

f1c45dd81798cc0a6959987c75e3d9bcafb21d058393ba2d1042c8c83df6f1db

f21233ebfc628748be56e544ee831e6723e5534227b3d48b06b77a7bda1f6e28

9f4908fbeadf808332595490c755859be19ef09a0badffe40bd7a71f4e32ef21

1433170b94d1cbf64499faf5e26b0d34bf3816c519c33c06c0a1462b9c0d8dbb

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

79c5855937a45e7a49c31858ea6300d9033d14fd74d42669011f77d7abb7d787

8ee366b0683482228fa0b8b8982a4337ab558f1f3c1a848994547e49fffdc236

77d2f9168401ea0dd426210e3287664a06f0765f24da3d6b4175075904e09c80

6637f316efd5ffa3ccbe298b2c9990c67425ce8ed96acf39a69b6d517e115377

HealthPoint, King County Community Health Center, CHCKC, healthcare, medicaid, preventive care, primary care, doctor, dentist, pregnancy, king, health provider

HealthPoint is a nonprofit community health center dedicated to high-quality care. We're your one-stop resource for medical, dental, pharmacy, and naturopathic care.

description

Welcome to HealthPoint | Everyone Deserves Great Care

HealthPoint, your Health Care Home. We are your one-stop resource for medical, dental, behavioral health, and naturopathic care. A place that welcomes and accepts you, no matter what your circumstances. 

https://www.healthpointchc.org/images/uploads/meta/_resized/og_logo.png

https://www.healthpointchc.org/assets/img/global/og_logo.png

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Network Solutions, LLC

healthpointchc.org

Abuse

Google LLC

GOOGLE

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
		new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
		j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
		'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
		})(window,document,'script','dataLayer','GTM-PTX3D9B');


											function googleTranslateElementInit() {
												new google.translate.TranslateElement({ pageLanguage: 'en', layout: google.translate.TranslateElement.InlineLayout.SIMPLE, gaTrack: true, gaId: 'UA-8281951-1' }, 'google_translate_element');
											}
										


	jQuery(document).ready(function() {
		if (Cookies.get('1782836988') != 'yes') {Cookies.set('1782836988', 'yes', { expires: 14, path: '' })
			$('#alertModal').show();
		}
	});


cntrUpTag.track("cntrData","e37c3f29a34ea6f2");

Requests	IP Address	Location	AS Autonomous System
116	164.92.118.193	Santa Clara, California, United States	AS14061DigitalOcean, LLC
116	1	-	-

Security Scan Report: healthpointchc.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History