store.camersoftware.com/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 02:33:49 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://store.camersoftware.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3495
Expires: Sun, 27 Nov 2022 03:32:05 GMT
Date: Sun, 27 Nov 2022 02:33:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6470
Cache-Control: max-age=121508
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:50 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 12:18:58 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10471
Expires: Sun, 27 Nov 2022 05:28:21 GMT
Date: Sun, 27 Nov 2022 02:33:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 02:19:19 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 871
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /H37MQ0GOP8qskHt8MAZJeehc/LVNbxLj+pYFoH2DusWQaPgTOf8UQVuAH6VSy+iuaDFwwsNI2k=
x-amz-request-id: QDYD3ZHYE7N1TSF9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 01:41:26 GMT
age: 3144
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e43052a5fc149653af5b7d3b7ec61c3
4b1288e638026507ada159f2ccfa1cce9d554350
a177d48387d467fb2b80f44efc62a5135a4011e577ac7ad03c5209aee577c33d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A177D48387D467FB2B80F44EFC62A5135A4011E577AC7AD03C5209AEE577C33D"
Last-Modified: Sat, 26 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 27 Nov 2022 08:33:50 GMT
Date: Sun, 27 Nov 2022 02:33:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 02:11:12 GMT
cache-control: public,max-age=3600
age: 1358
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1125
Cache-Control: max-age=111106
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:50 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:25:36 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cPuO6wKgZ8k9MJaJLzSa6g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: K+7y+vK0XkNRf0szUler2Gq4PSM=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11295
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:33:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11295
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:33:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11295
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:33:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11295
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:33:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
age: 17498
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
age: 17498
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31dafe91-0b1b-40e9-927c-c01863516712.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31dafe91-0b1b-40e9-927c-c01863516712.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccb536b51f31391c89fb2abe3be6c749
c9a5ab962bfdd174aecd4809d770f0fe305ab8e4
b4b6f70603ab79399aeda1d8b7e8f2662da37b51a2d076b8e754c812b6fa5b47
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31dafe91-0b1b-40e9-927c-c01863516712.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9073
x-amzn-requestid: 6cf20b75-6b27-4a34-97a8-017d7169f31b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8JuVHY7IAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2328-1ca76b3537613fb26358b8f2;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: lg8rdnHT_ndB-9CMrHcVN8a2xZCubuTEpUQ2m6i77l-NfdNfhfITEQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 14:36:38 GMT
age: 43034
etag: "c9a5ab962bfdd174aecd4809d770f0fe305ab8e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 33d3ca17-7878-4897-a634-5f626a64e820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJ40OEOqIAMFaOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380a1b4-040288d571fc10b96d893fa4;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 11:06:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f_U8KSYET6kaKAPbEV7sHW0tO6JGijsqUvghniwzFCRd2YGQjVlFoA==
via: 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 10:16:33 GMT
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
age: 58639
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y0ofyT6UcPjB8mfRR1VMjHSTW64Qb_EQ0rrjsOdbby1CG-xMIFJMPw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:49:19 GMT
age: 17073
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8aa8094-2375-4409-9501-0fe4e50b766d.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8aa8094-2375-4409-9501-0fe4e50b766d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d6328cb630204883d77babc9922075f1
e440f7b94b53b6e7880b26f9653b1b266aae0190
b15144c88277e24acde95b45e56fb2d237f5b1d34a9590aa5aa2741f7102a9fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8aa8094-2375-4409-9501-0fe4e50b766d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8584
x-amzn-requestid: ef9e42a9-be9d-4239-831d-4c4250b0cb8d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCKAsGTDIAMFa1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8a04-17e610e05ee024007d64c6ea;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 02:48:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t-piL9xKmcPO_0sQryoAbpT03ZaUonSHkGK6eD3fid_WrQRJgEvgrw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 14:36:47 GMT
age: 43025
etag: "e440f7b94b53b6e7880b26f9653b1b266aae0190"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5
200 OK 299 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5
IP
Hash 1e34ceaa9a4c96c3499483f5fe818671
55a92f1196d0155e2bf0632f0905b5b8000f5ad7
9738e8e5222b5802082be7a77e56ad9fdee06718da410f356504184fd08b56bf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
content-length: 299
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:49:45 GMT
etag: "2b5-5d851dc6bb94c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.10.4
200 OK 256 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.10.4
IP
File type ASCII text, with very long lines (407), with no line terminators
Hash 25eb868b79267c417ba90c9c40713894
88c9b6fbbfbb5ccbe881143dcd81650ecdfa8dc8
5615b76ed49dc6445ef53c12d8998ec9c8cb45f73f76f1fab0a37e190a97a15f
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
content-length: 256
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "197-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.10.4
200 OK 425 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.10.4
IP
File type ASCII text, with very long lines (1002), with no line terminators
Hash 126ee13d2c9ac35d1b85dfe2918a3825
124c6c60e909381f9fca156876342d1d2b708b19
98dac52a015d3430abe981c02bd17e035f14399b5c64cecd90d7556335a0e341
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
content-length: 425
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "3ea-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.10.4
200 OK 313 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.10.4
IP
File type ASCII text, with very long lines (665), with no line terminators
Hash 994f756b6d1b3f5a8d901125a1a98d6a
8ac084b1e23dad2ad2299543daf432571fd4e250
70eb8d3cfd7a17ade811bcf0dc3aeb83619daf551cc51ef20b140b341a3571ce
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
content-length: 313
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "299-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.0.5
200 OK 374 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.0.5
IP
Hash 99f478aea66ce928c3dda9ab3a0dbbb3
29bb3e5ccb81defba6cf1749768f4c57533e261a
44b0fdb4d849dfa85411e2e814e8352a89f04fad8e65924f477368dad133955e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.0.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
content-length: 374
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 19:19:24 GMT
etag: "3e0-5d84fc2c00631-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
200 OK 338 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
IP
File type ASCII text, with very long lines (9281), with no line terminators
Size 338 kB (337725 bytes)
Hash ba4711a21f4e6218dd3a0b70e36b9e95
e62c84202d1cd828dc9604e4f1e605fef3952a9b
f07211928359f5be33a054b9e6d6b246d1b7c007eab91a485550ee9e4861a7bf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-2441"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.6.0
200 OK 19 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.6.0
IP
File type ASCII text, with very long lines (29253), with no line terminators
Hash b061ef7e1e8a37d28c2bcc04c72f8500
e85e4fe6aec45ed8e64b9102ce42012e9d229449
b5c8f05583c89a6c0b8f4415667306506178b3c673f4b592dd02a590fe2d7c8a
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-7245"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/HTB1wUEAGwaTBuNjSszfq6xgfpXaG.jpg
200 OK 58 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/HTB1wUEAGwaTBuNjSszfq6xgfpXaG.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x1000, components 3\012- data
Hash 858f324cd928282a1d13dd5f120d7f91
a13b5f56f396600ac68c0f4f115b074c41e9e8e9
7726f2dc8c3a3103668e2a243e5662377c0f3064a28212652b0fab7d6657258f
GET /wp-content/uploads/2019/12/HTB1wUEAGwaTBuNjSszfq6xgfpXaG.jpg HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/jpeg
content-length: 58449
last-modified: Fri, 18 Feb 2022 19:24:56 GMT
etag: "620ff288-e451"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/HTB1bfowXrY1gK0jSZTEq6xDQVXaC.jpg
200 OK 105 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/HTB1bfowXrY1gK0jSZTEq6xDQVXaC.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x800, components 3\012- data
Size 105 kB (105191 bytes)
Hash 48493b036cf72f083a3306b6f15a5301
ee1652f3f94e95f80c103f68bc03b1a4b3b5ab6a
5b6cb4a031288d12f01127224b12b480e52efa67ec545afabd134a71b3b55b81
GET /wp-content/uploads/2019/12/HTB1bfowXrY1gK0jSZTEq6xDQVXaC.jpg HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/jpeg
content-length: 105191
last-modified: Fri, 18 Feb 2022 19:24:50 GMT
etag: "620ff282-19ae7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/5e1196ca9fe6a.png
200 OK 383 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/5e1196ca9fe6a.png
IP
File type PNG image data, 1000 x 702, 8-bit/color RGBA, non-interlaced\012- data
Size 383 kB (382785 bytes)
Hash 68adcdfdbf8a7bafb5c0531e0e4a7ee7
eeca98034105c5ba628fc728b5f144af28386068
0d59142caa855c3e8b0e3e2344698b6cabd18eb0ffd87f3b492a433eca2e61fb
GET /wp-content/uploads/2020/01/5e1196ca9fe6a.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 382785
last-modified: Fri, 18 Feb 2022 19:25:37 GMT
etag: "620ff2b1-5d741"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
store.camersoftware.com/wp-content/uploads/2019/12/acer-logo-F23626AD07-seeklogo.com_.png
200 OK 9.5 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/acer-logo-F23626AD07-seeklogo.com_.png
IP
File type PNG image data, 300 x 78, 8-bit/color RGBA, non-interlaced\012- data
Hash 83b7592afcfc3fe03bfc081458a20fd8
9a39f1d8faaee6788b3a969b22348664c326a5a8
863b6b95c043dc6b5f42ad4fd51c836bb70d953ec61aad18b74fb2e8f10cb46a
GET /wp-content/uploads/2019/12/acer-logo-F23626AD07-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 9476
last-modified: Fri, 18 Feb 2022 19:25:19 GMT
etag: "620ff29f-2504"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/Apple-logo-DBCA9273F8-seeklogo.com_.png
200 OK 62 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/Apple-logo-DBCA9273F8-seeklogo.com_.png
IP
File type PNG image data, 249 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash d725f98517ce741fae87ff7a75c3d864
320c6217da2e46821cda3fd1445703cc005d827d
b1d0b4553fe3d17f2cdf93957208ab2987fdb75950fa0931d753c828e7af1e82
GET /wp-content/uploads/2019/12/Apple-logo-DBCA9273F8-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 61565
last-modified: Fri, 18 Feb 2022 19:24:19 GMT
etag: "620ff263-f07d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/Asus-logo-A5705FDB70-seeklogo.com_.png
200 OK 3.6 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/Asus-logo-A5705FDB70-seeklogo.com_.png
IP
File type PNG image data, 300 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash 3d50075314daf59274d2c12c0c70da64
167cf7ee31d54e80622c793a107515d9363e7316
23ccf1377d37c066132a24f8a8120be9082a27886efbe18ae381d7c522654024
GET /wp-content/uploads/2019/12/Asus-logo-A5705FDB70-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 3554
last-modified: Fri, 18 Feb 2022 19:24:19 GMT
etag: "620ff263-de2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/5a721ba7ffd0180001a35a0e_bosch.png
200 OK 25 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/5a721ba7ffd0180001a35a0e_bosch.png
IP
File type PNG image data, 332 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash a08b9c95dcf6eea7ea7035e668d611ff
fa5c56c9e84dd2eddc36de75a8fec7ab593ea6c9
0833a6e5380afc11574c494266abe50852c3a915a99528558ca0d4dcd9e1bb45
GET /wp-content/uploads/2019/12/5a721ba7ffd0180001a35a0e_bosch.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 24827
last-modified: Fri, 18 Feb 2022 19:23:20 GMT
etag: "620ff228-60fb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/Camer-Software-logo-Black_No_Background.png
200 OK 11 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/Camer-Software-logo-Black_No_Background.png
IP
File type PNG image data, 546 x 448, 8-bit/color RGBA, non-interlaced\012- data
Hash 3db847600874d6d909834264abfef5b2
5cd00a28b4804448adf709d61d02fec340551893
96849754b7a8b67e54820220acafcd08a38998a426fe9a3531e80c0972f1dab6
GET /wp-content/uploads/2019/12/Camer-Software-logo-Black_No_Background.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 10809
last-modified: Fri, 18 Feb 2022 19:24:19 GMT
etag: "620ff263-2a39"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
200 OK 12 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
IP
File type ASCII text, with very long lines (2630), with no line terminators
Hash e2d8f73f547859b4f07c04250b3c2f8b
254bf65d03c09fef7437d03eb615804f3adb6ade
f9f4138befcf4987b7ff26e8a5cbcbdd8b6cbd200c6b6267c92dc362102feefb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-a46"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/dahua-logo-40C68F2D28-seeklogo.com_.png
200 OK 11 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/dahua-logo-40C68F2D28-seeklogo.com_.png
IP
File type PNG image data, 300 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash 28614794d2941b62e426669d02da1dff
a46390f605e16ac289aafa1ef30c2b1731d5c180
b7ff0455c4ced478a2cfe0ea5d80409f8201988b07faf329ce90bfec12f39759
GET /wp-content/uploads/2019/12/dahua-logo-40C68F2D28-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 11173
last-modified: Fri, 18 Feb 2022 19:25:19 GMT
etag: "620ff29f-2ba5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/dell-logo-49B6BF5FC9-seeklogo.com_.png
200 OK 18 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/dell-logo-49B6BF5FC9-seeklogo.com_.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 8dac90ee36d3e20aa38fe0ae9e059a74
5e1b834cba15f14de6058b38d2ab47441b171f6e
a34aaff9a39b5c69583cc1e1c9721ebe5f25854a0c2991875edcc3b0e51f26f3
GET /wp-content/uploads/2019/12/dell-logo-49B6BF5FC9-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 18259
last-modified: Fri, 18 Feb 2022 19:25:19 GMT
etag: "620ff29f-4753"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/hikvision-logo-BA7C30E188-seeklogo.com_.png
200 OK 8.8 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/hikvision-logo-BA7C30E188-seeklogo.com_.png
IP
File type PNG image data, 300 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash dfb71d063f846b193b22de3a6bcb2d90
155443b8da4092643e1b449b273f5d1dee67f18b
bde29657bf169a1882606b9eabc3578d849d8df3afac4c9cd270179af6cd0bb3
GET /wp-content/uploads/2019/12/hikvision-logo-BA7C30E188-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 8827
last-modified: Fri, 18 Feb 2022 19:25:21 GMT
etag: "620ff2a1-227b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/hp-logo-EEECF99DCE-seeklogo.com_.png
200 OK 18 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/hp-logo-EEECF99DCE-seeklogo.com_.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 299ef1a5274d4a98153e0bfd4caee02e
e041dcd4be6684c57e64a519c5b69221e1443e37
1ad39463c8f3f4d88b315e1bc833b958e5a49439efdb075f283a32095352e0ff
GET /wp-content/uploads/2019/12/hp-logo-EEECF99DCE-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 17961
last-modified: Fri, 18 Feb 2022 19:25:21 GMT
etag: "620ff2a1-4629"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/Lenovo-logo-C637A0E21A-seeklogo.com-1.png
200 OK 7.3 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/Lenovo-logo-C637A0E21A-seeklogo.com-1.png
IP
File type PNG image data, 300 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash 0582d4e36da35a95b5e2f91e7307dcfb
d9de9ffa5da94f79fdc05b09f35cb41e1e393185
43d1d9d2157a0c9a353a5940ada8946d8ed552c9f831cdc9619c7c1be607f34e
GET /wp-content/uploads/2019/12/Lenovo-logo-C637A0E21A-seeklogo.com-1.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 7257
last-modified: Fri, 18 Feb 2022 19:25:10 GMT
etag: "620ff296-1c59"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/Huawei-logo-A8C7CBCAA8-seeklogo.com-1.png
200 OK 41 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/Huawei-logo-A8C7CBCAA8-seeklogo.com-1.png
IP
File type PNG image data, 300 x 292, 8-bit/color RGBA, non-interlaced\012- data
Hash c68559d7e537e1cb97865650ec156937
90762a6f224544fedc254e1c91fb0231b879d960
e5401d2cb897be53394a3c730b848b797f544301c84348e9bf289db6abd57042
GET /wp-content/uploads/2019/12/Huawei-logo-A8C7CBCAA8-seeklogo.com-1.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 40846
last-modified: Fri, 18 Feb 2022 19:25:08 GMT
etag: "620ff294-9f8e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/Orange-Money-e1577984576826.png
200 OK 3.5 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/Orange-Money-e1577984576826.png
IP
File type PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash a5000ab136c17d649757b9a95a1f205f
4d598d2fd55277a5f057c5ecbc1da1a9f10a0eaf
e75145a89c9ab37c067e24fd26c5eb09a72db6da068dbf7dab09504382591cc4
GET /wp-content/uploads/2020/01/Orange-Money-e1577984576826.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 3515
last-modified: Fri, 18 Feb 2022 19:26:43 GMT
etag: "620ff2f3-dbb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/download-1-e1577984602239.png
200 OK 1.2 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/download-1-e1577984602239.png
IP
File type PNG image data, 75 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash 595a85c915043f7f7ae5935c791e0022
fc2e9ea765dadf18dc2c6234771bf715cb355a87
b5ac98792e19b9fba89909591c783638788abd33b0c8ec5c14d73f43035b10e2
GET /wp-content/uploads/2020/01/download-1-e1577984602239.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 1234
last-modified: Fri, 18 Feb 2022 19:26:48 GMT
etag: "620ff2f8-4d2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/download-e1577984626615.png
200 OK 3.6 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/download-e1577984626615.png
IP
File type PNG image data, 76 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e342dc9894f3896683cbef41c621047
ea2305358c3316e4f9e9b52459f08c9aa7139067
11280207d6282dd31469a71fc23f2e367a8427881595050dfd8e0bc04af902fa
GET /wp-content/uploads/2020/01/download-e1577984626615.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 3565
last-modified: Fri, 18 Feb 2022 19:26:48 GMT
etag: "620ff2f8-ded"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/gtranslate/flags/16/en.png
200 OK 707 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/gtranslate/flags/16/en.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e4896565595fc22e344fd619c0ed15bb
43d4481a4cc3e60b406b2467b5f7e576fcbae260
c3a4cb8f32ef0cd89e6429d40d1faebd359e02e34d69764052c8402a391e9a00
GET /wp-content/plugins/gtranslate/flags/16/en.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 707
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:49:45 GMT
etag: "2c3-5d851dc6aa00b"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=6.7.3
200 OK 107 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=6.7.3
IP
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Size 107 kB (107448 bytes)
Hash 017429df0e11ba93c7190d83ef39b18d
f1d887ad64159dda344160a15e940af6a30d97f7
445e118b7e1e40ee991b41519da08da7a988165ed48dc17a482b8f81d8466710
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=6.7.3 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:37 GMT
etag: W/"621021cd-32f4b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.0.9
200 OK 148 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.0.9
IP
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Size 148 kB (147752 bytes)
Hash db299277beb69533683f623768a2303c
fe50ea33dcba94336b3f433ef0303d9455276676
b63f1b82aa68321fffd28bd10c262f4c698e223cef1318e8dfc32286039ca392
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.0.9 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:20:33 GMT
etag: W/"620ff181-daf1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/
200 OK 430 kB IP
Size 430 kB (429799 bytes)
Hash a11eb4ab44b0c32467cfce1ffe0174ab
fc079ad4aaa6dfb1e0a53aa6a807e66870ae2efb
383dfe15a994ba8d7508b67b7e76ace197fa02f6193a9756236cd93dde649174
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:52 GMT
content-type: text/html; charset=UTF-8
link: <https://store.camersoftware.com/wp-json/>; rel="https://api.w.org/", <https://store.camersoftware.com/wp-json/wp/v2/pages/2139>; rel="alternate"; type="application/json", <https://store.camersoftware.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.4.16, PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.10.4
200 OK 388 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.10.4
IP
File type ASCII text, with very long lines (749), with no line terminators
Hash d76e241cef980ac70dd7ec2f0ad73c4f
7d86336411783515586920ef3dd3d59d133b6a6e
38b084b6db9415e1ffb7f07c96b4266040ab1033803c4fecb21efd55fb37083d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
content-length: 388
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "2ed-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/08/cropped-Camer-Software-logo-Digital-Solutions-Black_No_Background_1200px.jpg
200 OK 214 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/08/cropped-Camer-Software-logo-Digital-Solutions-Black_No_Background_1200px.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 3939x1632, components 3\012- data
Size 214 kB (214305 bytes)
Hash dc46d0f029ddceaab3b01d88a4dc4286
515755523898ed522264fa8f76ca4d8f1a8ab10e
4a65e8ca70f9e5b7b6becd9934f600f29a5c8c15284de1dbd3cafe60900cc241
GET /wp-content/uploads/2019/08/cropped-Camer-Software-logo-Digital-Solutions-Black_No_Background_1200px.jpg HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/jpeg
content-length: 214305
last-modified: Fri, 18 Feb 2022 19:23:04 GMT
etag: "620ff218-34521"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=6.7.3
200 OK 336 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=6.7.3
IP
File type ASCII text, with very long lines (4933), with no line terminators
Size 336 kB (336478 bytes)
Hash cfd169f0e392830187244644df81506c
9255502893fc9e4661a4345ec131ff1567486ddb
0ea97354b9d53d6f05355ca6afc020b01d0e2c0e693372f6d3690ad256ba63c3
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=6.7.3 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:37 GMT
etag: W/"621021cd-1345"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:33:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 720cd6a180abb6a580f8f6e0f4b62af1
5db7e6499dcb610553fcac13e0d67e736852eff7
240310e76284a7ba0994fcdf72c189e5a59b9efff4a0cb4a8ce708c839bc8006
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "240310E76284A7BA0994FCDF72C189E5A59B9EFFF4A0CB4A8CE708C839BC8006"
Last-Modified: Fri, 25 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14270
Expires: Sun, 27 Nov 2022 06:31:44 GMT
Date: Sun, 27 Nov 2022 02:33:54 GMT
Connection: keep-alive
files.findtrustclicks.com/scripts/stock.js
200 OK 14 B URL HTTP/1.1 files.findtrustclicks.com/scripts/stock.js
IP
File type ASCII text, with no line terminators
Hash 72f1e8b856d4317cb40af986a55b6670
47e6db80d6d59cf97163bd2723a5c4af15f8b9cf
1a106fea3287079a3f873a0552cdc8c7edea992195a3d1248472ec27c855e599
GET /scripts/stock.js HTTP/1.1
Host: files.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:33:54 GMT
Content-Type: application/javascript
Content-Length: 14
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Sat, 26 Nov 2022 12:49:46 GMT
ETag: "e-5ee5f12b586cd"
Accept-Ranges: bytes
store.camersoftware.com/wp-content/themes/electro/assets/fonts/font-electro.ttf
200 OK 17 kB URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/fonts/font-electro.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, font-electro\012- data
Hash 6b330513ad51dad2bea4d290d9cc2e1b
731514a50030d5b0e29b01145730001782d8d45d
72b513a35da918202761ab8a472a2a563f5d807af6e9fb9625bea53386c72368
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/fonts/font-electro.ttf HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2
Cookie: trainmeassyst=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:54 GMT
content-type: application/font-sfnt
content-length: 17120
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: "620ff207-42e0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
away.cdnbestplatform.com/go.php?id=9677-22-5680954-11
200 OK 410 B URL HTTP/2 away.cdnbestplatform.com/go.php?id=9677-22-5680954-11
IP
ASN #206638 PE Brezhnev Daniil
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f3307b2997441c6828a2f6b13256eea0
a74032028f8cb55551f5445cb198e63e898c45a3
b91ab8f7b48f46582fbb5cc1e4dc8cad17339a5def31357fdd103c2a63724371
Analyzer Verdict Alert fortinet Malware
GET /go.php?id=9677-22-5680954-11 HTTP/1.1
Host: away.cdnbestplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 410
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0617394d2196a845ccecd0896c88db6f
692c1c242364d893af27cf50ef0d38f0fb60ecd3
52bfd50d03460b4eaf6222b8adfe5730ddf1735a5715ae59c99a4b3fbeb6fae7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52BFD50D03460B4EAF6222B8ADFE5730DDF1735A5715AE59C99A4B3FBEB6FAE7"
Last-Modified: Fri, 25 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4509
Expires: Sun, 27 Nov 2022 03:49:06 GMT
Date: Sun, 27 Nov 2022 02:33:57 GMT
Connection: keep-alive
greenskymotions.com/b91698fd2.js
200 OK 56 B URL HTTP/2 greenskymotions.com/b91698fd2.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 01fedb484c76c86eb5bafcc15b97bddc
aa3d7fba2de0e16f69798d6dc6e77d2765a90455
93f23f64c6e14a7778241254ad90d49a38dfe406afdd5e0e223064613572d40f
Analyzer Verdict Alert fortinet Phishing
GET /b91698fd2.js HTTP/1.1
Host: greenskymotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: uuid=cdf7fbb6-25d8-4f7c-8600-effa25f25794
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 56
last-modified: Thu, 13 Oct 2022 01:01:02 GMT
etag: "6347634e-38"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
greenskymotions.com/favicon.ico
204 No Content 0 B URL HTTP/2 greenskymotions.com/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: greenskymotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenskymotions.com/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed17
Cookie: uuid=cdf7fbb6-25d8-4f7c-8600-effa25f25794
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 02:33:57 GMT
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ea242f8164adfbd07eaf87d98011b5b2
240792c77d0ce8cdb92872302c182bac579ba29c
b988e7ce32306479f246e371798b6a76d22b425f1c7971fcbf5da6737babb1e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B988E7CE32306479F246E371798B6A76D22B425F1C7971FCBF5DA6737BABB1E4"
Last-Modified: Sat, 26 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12743
Expires: Sun, 27 Nov 2022 06:06:20 GMT
Date: Sun, 27 Nov 2022 02:33:57 GMT
Connection: keep-alive
store.camersoftware.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:54:43 GMT
etag: W/"621015a3-195e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/bootstrap.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-af1a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-2fa6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.5
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.5
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 02:33:53 GMT
date: Sun, 27 Nov 2022 02:33:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/wp-store-locator/css/styles.min.css?ver=2.2.235
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/wp-store-locator/css/styles.min.css?ver=2.2.235
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-store-locator/css/styles.min.css?ver=2.2.235 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:52:25 GMT
etag: W/"62101519-3a83"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=5.9.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=5.9.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=5.9.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:34 GMT
etag: W/"620ff1fa-ee4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/colors/orange.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/colors/orange.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/css/colors/orange.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: W/"620ff207-9161"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-35ed"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/core.maps.css?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/core.maps.css?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/core.maps.css?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-1690"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/v2.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/v2.min.css?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/css/v2.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: W/"620ff207-48d63"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0
IP
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-4a6a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/animate.css/animate.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/animate.css/animate.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/vendor/animate.css/animate.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-e283"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/pace.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/pace.min.js?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/js/pace.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-303b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
new.weatherplllatform.com/stick.js?v=7.77.7
200 OK 0 B URL HTTP/2 new.weatherplllatform.com/stick.js?v=7.77.7
IP
ASN #206638 PE Brezhnev Daniil
Analyzer Verdict Alert fortinet Malware
GET /stick.js?v=7.77.7 HTTP/1.1
Host: new.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:54 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 06 Nov 2022 00:27:12 GMT
vary: Accept-Encoding
etag: W/"6366ff60-a40"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
greenskymotions.com/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed17
200 OK 0 B URL HTTP/2 greenskymotions.com/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed17
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed17 HTTP/1.1
Host: greenskymotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://away.cdnbestplatform.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:57 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=cdf7fbb6-25d8-4f7c-8600-effa25f25794; expires=Tue, 27-Dec-2022 02:33:57 GMT; Max-Age=2592000; path=/; domain=greenskymotions.com
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-3a4f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300%2C500%2C400%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300%2C500%2C400%2C700
IP
GET /css?family=Roboto:300%2C500%2C400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 02:33:53 GMT
date: Sun, 27 Nov 2022 02:33:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/electro.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/electro.min.js?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/js/electro.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-50d4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/owl.carousel.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/owl.carousel.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/owl.carousel.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-a1cb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
broworker4s.com/sw/bro.js
200 OK 0 B URL HTTP/2 broworker4s.com/sw/bro.js
IP
GET /sw/bro.js HTTP/1.1
Host: broworker4s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenskymotions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:58 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
expires: Mon, 27 Nov 2023 02:33:58 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-b7a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/fontawesome/css/all.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/fontawesome/css/all.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/vendor/fontawesome/css/all.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-da9f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js?ver=6.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js?ver=6.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js?ver=6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:20:34 GMT
etag: W/"620ff182-24ba4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-85b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.8.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.8.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.8.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:18:39 GMT
etag: W/"620ff10f-307cc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/scrollup.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/scrollup.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/scrollup.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-8ca"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap-hover-dropdown.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap-hover-dropdown.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/bootstrap-hover-dropdown.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-520"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/engines/core.leaflet.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/engines/core.leaflet.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/engines/core.leaflet.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-3909"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/Title-Bild.png
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/Title-Bild.png
IP
GET /wp-content/uploads/2019/12/Title-Bild.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: image/png
content-length: 658312
last-modified: Fri, 18 Feb 2022 19:25:17 GMT
etag: "620ff29d-a0b88"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:54:43 GMT
etag: W/"621015a3-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.4.4
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.4.4
IP
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.4.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:35 GMT
etag: W/"620ff1fb-11b0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/core.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/core.js?ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/js/core.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-32d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/style.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/style.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/style.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:52 GMT
etag: W/"620ff20c-510ac"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/elementor/css/global.css?ver=1604327734
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/uploads/elementor/css/global.css?ver=1604327734
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/global.css?ver=1604327734 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:26:49 GMT
etag: W/"620ff2f9-159a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-253d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/leaflet.css?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/leaflet.css?ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/leaflet.css?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-371a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: W/"620ff207-c0a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 21:23:52 GMT
etag: W/"636582e8-167a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/jquery.colorbox-min.js?ver=1.4.21 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:35 GMT
etag: W/"620ff1fb-2e7c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/frontend.maps.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/frontend.maps.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/frontend.maps.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-1631"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
new.weatherplllatform.com/pick.js?v=11.87.33
200 OK 0 B URL HTTP/2 new.weatherplllatform.com/pick.js?v=11.87.33
IP
ASN #206638 PE Brezhnev Daniil
Analyzer Verdict Alert fortinet Malware
GET /pick.js?v=11.87.33 HTTP/1.1
Host: new.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:54 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 27 Oct 2022 17:28:29 GMT
vary: Accept-Encoding
etag: W/"635abfbd-921"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/jquery.easing.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/jquery.easing.min.js?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/js/jquery.easing.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-dab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/core.maps.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/core.maps.js?ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/core.maps.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-4a79"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/core.marker.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/core.marker.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/core.marker.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-2fb8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/leaflet.js?key&ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/leaflet.js?key&ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/leaflet.js?key&ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-22526"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-778b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:13 GMT
etag: W/"621021b5-aab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.0.9
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.0.9
IP
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.0.9 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:20:34 GMT
etag: W/"620ff182-41018"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.2.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-72a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/tether.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/tether.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/tether.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-5ab1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.css?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:49 GMT
etag: W/"620ff209-d14f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-bdd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:13 GMT
etag: W/"621021b5-25f8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:49 GMT
etag: W/"620ff209-16b15"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:19:23 GMT
etag: W/"620ff13b-5079"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 27 Nov 2022 02:33:53 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+908; expires=Tue, 26-Nov-2024 02:33:53 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:54:43 GMT
etag: W/"621015a3-4b3d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/engines/core.leaflet.marker.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/engines/core.leaflet.marker.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/engines/core.leaflet.marker.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-1609"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/elementor/css/post-7460.css?ver=1604327734
404 Not Found 0 B URL HTTP/2 store.camersoftware.com/wp-content/uploads/elementor/css/post-7460.css?ver=1604327734
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-7460.css?ver=1604327734 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 27 Nov 2022 02:33:54 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.16
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://store.camersoftware.com/wp-json/>; rel="https://api.w.org/"
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/bootstrap.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/bootstrap.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/css/bootstrap.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:46 GMT
etag: W/"620ff206-1754b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.5
IP
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-21826"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C300%2C600%2C700%2C800%2C800italic%2C700italic%2C600italic%2C400italic%2C300italic&subset=latin%2Clatin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C300%2C600%2C700%2C800%2C800italic%2C700italic%2C600italic%2C400italic%2C300italic&subset=latin%2Clatin-ext
IP
GET /css?family=Open+Sans%3A400%2C300%2C600%2C700%2C800%2C800italic%2C700italic%2C600italic%2C400italic%2C300italic&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 02:33:53 GMT
date: Sun, 27 Nov 2022 02:33:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:19:21 GMT
etag: W/"620ff139-765f9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/common.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/common.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/js/common.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:33:53 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-5822"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
82.165.73.164
23.36.76.226
93.184.220.29
34.160.144.191
91.211.91.114
89.22.228.250
51.15.18.159
0.0.0.0