r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3147
Expires: Mon, 28 Nov 2022 12:22:32 GMT
Date: Mon, 28 Nov 2022 11:30:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4230
Cache-Control: max-age=87098
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 11:30:05 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:41:43 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18613
Expires: Mon, 28 Nov 2022 16:40:18 GMT
Date: Mon, 28 Nov 2022 11:30:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 11:17:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 739
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: feVL37kNojGC3nS5EMweayP60xB4pyMnmhrQSCPbLDCGM8mM2DnUkmF80wKKoXiIkNyCyO2Y2q4=
x-amz-request-id: 10ANQDY5M2QKYEAZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 10:42:01 GMT
age: 2884
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
kesmerchantservices.com/request-a-quote
162.144.186.188301 Moved Permanently 0 B URL HTTP/1.1 kesmerchantservices.com/request-a-quote
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /request-a-quote HTTP/1.1
Host: kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 28 Nov 2022 11:30:02 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Pragma: no-cache
X-Pingback: http://www.kesmerchantservices.com/xmlrpc.php
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Location: http://www.kesmerchantservices.com/request-a-quote/
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-Server-Cache: true
X-Proxy-Cache: MISS
Set-Cookie: PHPSESSID=1e4b8321c4b9f7d723e1a2f71cdcfbaf; path=/
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 11:30:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 11:11:12 GMT
cache-control: public,max-age=3600
age: 1133
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.kesmerchantservices.com/request-a-quote/
162.144.186.188200 OK 10 kB URL HTTP/1.1 www.kesmerchantservices.com/request-a-quote/
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4868), with CRLF, LF line terminators
Hash c33c113f4edf2aa637befe6faa3f6887
ed30e9839a5072f5d7461ab211c4698aa273faee
bf3df47850b065b60bafebb99e9c3e4160c1689f3e6a907048fdf1608d48b378
Analyzer Verdict Alert fortinet Malware
GET /request-a-quote/ HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:03 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 9989
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Pingback: http://www.kesmerchantservices.com/xmlrpc.php
Link: <http://www.kesmerchantservices.com/wp-json/>; rel="https://api.w.org/", <http://www.kesmerchantservices.com/?p=10>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-Server-Cache: true
X-Proxy-Cache: MISS
Set-Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343; path=/
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3328
Cache-Control: max-age=167538
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 11:30:05 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:02:23 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Coda%3A400&ver=4.6.25
142.250.74.10200 OK 326 B URL HTTP/1.1 fonts.googleapis.com/css?family=Coda%3A400&ver=4.6.25
IP 142.250.74.10:0
Hash 257401e93f81d514afaa5505f17fef6b
09672cd7e795f631d71854de8a35603bb7eb642f
5ce3c84382bfe2ed4cd9710d1ce18d4cd6381e18252b4aa396046cf8ecb25b2b
GET /css?family=Coda%3A400&ver=4.6.25 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 28 Nov 2022 11:30:06 GMT
Date: Mon, 28 Nov 2022 11:30:06 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-core/js/thickbox.css?ver=3.11.2.ffbc44e
162.144.186.188200 OK 1.0 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-core/js/thickbox.css?ver=3.11.2.ffbc44e
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 020f32bf9cba757d17d110a52bfa71dd
1dac7c3a777db9d92a4ffe4b880e7a3365e8b2c2
3d5bb0ef3b7df2b8b5bf671a2c51d4f9bdedddc33b98f0392f9902634ceccff3
GET /wp-content/plugins/wp-e-commerce/wpsc-core/js/thickbox.css?ver=3.11.2.ffbc44e HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:26:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 1015
Content-Type: text/css
push.services.mozilla.com/
52.42.234.253101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.234.253:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WbfC9D5yirbiMVHl6nN5cA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VYlVckmUa5l0FF7x3lnW3IDuzyA=
www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-components/theme-engine-v1/templates/wpsc-default.css?ver=3.11.2.ffbc44e
162.144.186.188200 OK 6.4 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-components/theme-engine-v1/templates/wpsc-default.css?ver=3.11.2.ffbc44e
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (363)
Hash d2772b1c6af189d01b51d39d4bf82c36
119b6b60db224ecbaad409912dcf3a83f343aec0
6898f7bbb7e36ac894aa3aa44d4c0fcea71490523ee41b5b45e1c7c3e37e2a40
GET /wp-content/plugins/wp-e-commerce/wpsc-components/theme-engine-v1/templates/wpsc-default.css?ver=3.11.2.ffbc44e HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 24 Jun 2020 10:29:03 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 6429
Content-Type: text/css
www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-components/theme-engine-v1/templates/compatibility.css?ver=3.11.2.ffbc44e
162.144.186.188200 OK 461 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-components/theme-engine-v1/templates/compatibility.css?ver=3.11.2.ffbc44e
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 9f388f28505c2c159730351a0b19eb36
3decd1fbdc6d4776c78ff255a905ceb0ff8cf7ff
e539ca309e2ca9d9ba4ea0d151eb1ac338a736eeb8d5ff71dde8bd80a9e9919b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-e-commerce/wpsc-components/theme-engine-v1/templates/compatibility.css?ver=3.11.2.ffbc44e HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 24 Jun 2020 10:29:03 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 461
Content-Type: text/css
www.kesmerchantservices.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
162.144.186.188200 OK 4.4 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9959)
Hash 1e40dfe689f1e989e1a3de2e3c6e26bf
4196eddc5203fd18f63e90065d777f757088ca2f
b40b1ef07db6e093ad2df064e8cb582906eb2448e1caacc2f5b721cd5d0e3cb4
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:39:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 4444
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/social-media-widget/social_widget.css?ver=4.6.25
162.144.186.188200 OK 533 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/social-media-widget/social_widget.css?ver=4.6.25
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 80defff8510e67563a0a25fec1fc0d8a
6c8446d6ea3aac79d40effb6fe0cd5ad8cfc7a7e
618ac180a8c589cfb7d853dfe9835f485eb58aa355fe2083858c7fa27daa437b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-media-widget/social_widget.css?ver=4.6.25 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 24 Jun 2020 10:29:59 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 533
Content-Type: text/css
www.kesmerchantservices.com/wp-content/themes/small-business/style.css?ver=1.7
162.144.186.188200 OK 8.9 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/style.css?ver=1.7
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (639), with CRLF line terminators
Hash b5e9d93125aeda7d96b8290dd4f6d4af
264dc33d74b11ab958e26250df1f2cd86b5898d1
f1252ec86d40e1a4f9a31062e3ea340e210f21a1c78ba20dc0261b12b551a7f0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/small-business/style.css?ver=1.7 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 24 Jun 2020 10:35:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 8928
Content-Type: text/css
www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-admin/js/jquery.livequery.js?ver=1.0.3
162.144.186.188200 OK 2.5 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-admin/js/jquery.livequery.js?ver=1.0.3
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 496a7730eca0b6baccf7dd6b59cb3858
392d145fe9e796a7ed8e0ce27b6a4b296aec037f
c8271ffafcc572172a852f916f391cab4fac3a559fd2ee38b4df36600b1a8ccd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-e-commerce/wpsc-admin/js/jquery.livequery.js?ver=1.0.3 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:25:05 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 2496
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-core/js/user.js?ver=3.11.2ffbc44e
162.144.186.188200 OK 4.4 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-core/js/user.js?ver=3.11.2ffbc44e
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 1305aa061548fa6293ce84998b4fe9ef
9eacb3cc855d69efcbaf302f7dd34e9147e5c7f8
ab99898e99dcfc73c8d3d363771047e05f6b08fa06845a99de61a632da922675
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-e-commerce/wpsc-core/js/user.js?ver=3.11.2ffbc44e HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:26:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 4373
Content-Type: application/javascript
www.kesmerchantservices.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
162.144.186.188200 OK 43 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (31997)
Hash 58d326e4cc09f905eb0020706c6b2b95
c19bd9030a7117699a3dd57dc1b69a3889409f61
63cd2e517cb5c7de07842d11640edb2d11359c76f7227160bc339347e39c1001
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 24 Jun 2020 10:39:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Transfer-Encoding: chunked
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/themes/small-business/js/menu.js?ver=4.6.25
162.144.186.188200 OK 210 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/js/menu.js?ver=4.6.25
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (376), with no line terminators
Hash 8b0e1ea7b251e3ed1fdd049a1028b5d5
13bea18dccb57be9ee7b324da63325f346d38059
1103ace7acaac1d1c16569dd3144b1105e9c58ba33fe7796dc6728444c25413f
GET /wp-content/themes/small-business/js/menu.js?ver=4.6.25 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:35:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 210
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-core/js/wp-e-commerce.js?ver=3.11.2.ffbc44e
162.144.186.188200 OK 19 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/wp-e-commerce/wpsc-core/js/wp-e-commerce.js?ver=3.11.2.ffbc44e
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4754)
Hash b925188d54a8b6586595a8514163fe8c
711222ca19673856c7474f4ae3a5b42723554d61
b33e67dceb89f39bd81a45f56f99ffb4591c5dc9d9c9ea6733a78b6a69d36fb6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-e-commerce/wpsc-core/js/wp-e-commerce.js?ver=3.11.2.ffbc44e HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:26:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Transfer-Encoding: chunked
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/themes/small-business/js/slider.js?ver=4.6.25
162.144.186.188200 OK 2.1 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/js/slider.js?ver=4.6.25
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (3737), with CRLF line terminators
Hash 3528b76f3f346d07402178e090e067be
3247cbcc52c562f1ca5b28b832a6012d2fc8667e
1c97f006072905c1028c37657aa290f9fa56dedc05fc22a6ac6689cf0c48d0e5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/small-business/js/slider.js?ver=4.6.25 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:35:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 2116
Content-Type: application/javascript
www.kesmerchantservices.com/wp-includes/js/comment-reply.min.js?ver=4.6.25
162.144.186.188200 OK 581 B URL HTTP/1.1 www.kesmerchantservices.com/wp-includes/js/comment-reply.min.js?ver=4.6.25
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1076), with no line terminators
Hash 1cce0f1442ecb8e72f7f8719595006ef
5e69ad3a422853cafff61e66d7d800ddba6b1d27
acbf04df2dfde974957fcdb5f6f01724d95cfd3045506d33d63e18ae651f4cd8
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js?ver=4.6.25 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 03:54:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 581
Content-Type: application/javascript
www.kesmerchantservices.com/wp-includes/js/wp-embed.min.js?ver=4.6.25
162.144.186.188200 OK 745 B URL HTTP/1.1 www.kesmerchantservices.com/wp-includes/js/wp-embed.min.js?ver=4.6.25
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1384), with no line terminators
Hash 9c6f1b6f8936fa69072c8a98f56e3618
b925ce0d82a9dd4710df8ad6f3301bb5496b0701
c15354cb467aed36e646dffd467bb0123c407affc84fae74471b396593f35a8b
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min.js?ver=4.6.25 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 03:54:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 745
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/jquery.validate.min.js?ver=1.9.0
162.144.186.188200 OK 7.9 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/jquery.validate.min.js?ver=1.9.0
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (1290)
Hash 99a450a6bcb00dbfb48227ad82a32bf6
54fa2c4742dd3805825acc940fa9cb34e6bdbd39
16e43975d86c041b08639272588a3921fcdbbc6ffe85709d52457b4808c0f51f
GET /wp-content/plugins/visual-form-builder/js/jquery.validate.min.js?ver=1.9.0 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:13:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 7893
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/vfb-validation.min.js?ver=20140412
162.144.186.188200 OK 525 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/vfb-validation.min.js?ver=20140412
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (912), with no line terminators
Hash 389b120280b8ae9509214c30648211a9
d1b437ea8375766bb4129e10fa841295b5495cd6
d933946d913b90edfb8c6a7068d21e6ad776a04bbc2100260066f03b3e55e92f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/visual-form-builder/js/vfb-validation.min.js?ver=20140412 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:13:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 525
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/jquery.metadata.js?ver=2.0
162.144.186.188200 OK 425 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/jquery.metadata.js?ver=2.0
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (920), with no line terminators
Hash 73935cd20f0ca5cbc9f4c20c700d8e43
8d77b9ca0f80ce85924dcfcee15e39566a9c3f3c
dd090858bde85a1fe7b21f4103b48e2cdd9f87102d223325149bf2f67a12f8e8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/visual-form-builder/js/jquery.metadata.js?ver=2.0 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:12:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 425
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/i18n/validate/messages-en_US.js?ver=1.9.0
162.144.186.188200 OK 745 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/js/i18n/validate/messages-en_US.js?ver=1.9.0
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash c6a2cbd910ab6726a8dfe402d02f5d5d
451dd6a201af841cb76c8ff5c8b2cd5e75354a1d
17e6aa62e471bd9e3780bd9e83722e10d07f1dbe04a4c5b2c17bf779694f5008
GET /wp-content/plugins/visual-form-builder/js/i18n/validate/messages-en_US.js?ver=1.9.0 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:12:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=21600
Expires: Mon, 28 Nov 2022 17:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 745
Content-Type: application/javascript
www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/css/visual-form-builder.min.css?ver=20140412
162.144.186.188200 OK 2.3 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/css/visual-form-builder.min.css?ver=20140412
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9763), with no line terminators
Hash f8de86223c7e684bd6026bf1986c452e
c032ac3035b1d405d9ae1066e319b844659a6c13
f75bc72e02feb049c1575f0d221ce4a68d5749d015e670752e07653017583bc1
GET /wp-content/plugins/visual-form-builder/css/visual-form-builder.min.css?ver=20140412 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:12:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 2327
Content-Type: text/css
www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/css/smoothness/jquery-ui-1.10.3.min.css?ver=20131203
162.144.186.188200 OK 6.3 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/visual-form-builder/css/smoothness/jquery-ui-1.10.3.min.css?ver=20131203
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (25200)
Hash a97ef7524033b2fd4f7f534ef3dd5649
210b548bc799ec2938231f4818d096f90d8725ed
59b3fd4c335b19a317464789552841fee05e12aa07f8d5d696d228ccdcddce9b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/visual-form-builder/css/smoothness/jquery-ui-1.10.3.min.css?ver=20131203 HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:06 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:12:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 28 Dec 2022 11:30:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 6301
Content-Type: text/css
www.kesmerchantservices.com/wp-content/plugins/social-media-widget/images/default/32/twitter.png
162.144.186.188200 OK 877 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/social-media-widget/images/default/32/twitter.png
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e41e7fc39e2b5888b3fc8e79788e27f6
c36704f196aef77534fabd1752443ab49cd82feb
0e2160fefe0b02729a87a03ef7f21fe2003b7054a7bbb5c11011c11a51a4156f
GET /wp-content/plugins/social-media-widget/images/default/32/twitter.png HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:32:17 GMT
Accept-Ranges: bytes
Content-Length: 877
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/png
www.kesmerchantservices.com/wp-content/uploads/2013/02/cropped-KES-logo-Merchant-w-text-black.jpg
162.144.186.188200 OK 9.2 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/uploads/2013/02/cropped-KES-logo-Merchant-w-text-black.jpg
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x90, components 3\012- data
Hash 10dcb7543f1fd2ea8054e3e954929e19
129937961067f2382220dc1ac57dfcbeb5e8f002
1e4958dd8ac60f5731fe81773e8bd94a8fb88143291fbc75d960942daff3ceba
GET /wp-content/uploads/2013/02/cropped-KES-logo-Merchant-w-text-black.jpg HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:36:24 GMT
Accept-Ranges: bytes
Content-Length: 9198
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/jpeg
www.kesmerchantservices.com/wp-content/plugins/social-media-widget/images/default/32/facebook.png
162.144.186.188200 OK 634 B URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/social-media-widget/images/default/32/facebook.png
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 82378b10a9b16af6fc2e089037660e4b
3b41821a2c28b414a727e477484d6f8ab219705c
81480cebe2ddeedde1af2e2a6f9eab352094abd78c75464705be2bcbb6e91b54
GET /wp-content/plugins/social-media-widget/images/default/32/facebook.png HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:32:09 GMT
Accept-Ranges: bytes
Content-Length: 634
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/png
www.kesmerchantservices.com/wp-content/plugins/social-media-widget/images/default/32/linkedin.png
162.144.186.188200 OK 1.6 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/plugins/social-media-widget/images/default/32/linkedin.png
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 242c1ea95892c88ae6dd45c34e38afef
64f04acebdbc4bdecea0565f104a058dc23cd8ef
133093dc3d145a5828d7011c5344ca59f9c0d7d28e235f0c50ab80491afadb30
GET /wp-content/plugins/social-media-widget/images/default/32/linkedin.png HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:32:14 GMT
Accept-Ranges: bytes
Content-Length: 1580
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/png
www.kesmerchantservices.com/wp-content/themes/small-business/images/d5logofooter.png
162.144.186.188200 OK 4.7 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/images/d5logofooter.png
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 56bcb943f4efccaa2cb6993bbb2cb400
a06b0349fa18586ba8527e1c26882e2212b3ca08
5156060556ba17e28a467b4a7a53fc12aaa19bc7ab8617ab60a9e77e9986e056
GET /wp-content/themes/small-business/images/d5logofooter.png HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:35:35 GMT
Accept-Ranges: bytes
Content-Length: 4676
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/png
www.kesmerchantservices.com/wp-content/uploads/2013/02/Fotolia_33447314_XS1-148x111.jpg
162.144.186.188200 OK 5.1 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/uploads/2013/02/Fotolia_33447314_XS1-148x111.jpg
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 148x111, components 3\012- data
Hash 7d5b66c04227c82c3f91fe53c15a5f90
54cc9ea28dbd41ccb2810edca3bac2ba0afc2776
45f1db4c87808d9c0e0ce74bc0fed793d409ef7f7940e16004cbadba3acf98a8
GET /wp-content/uploads/2013/02/Fotolia_33447314_XS1-148x111.jpg HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:36:46 GMT
Accept-Ranges: bytes
Content-Length: 5144
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/jpeg
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10534
Expires: Mon, 28 Nov 2022 14:25:41 GMT
Date: Mon, 28 Nov 2022 11:30:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10534
Expires: Mon, 28 Nov 2022 14:25:41 GMT
Date: Mon, 28 Nov 2022 11:30:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10534
Expires: Mon, 28 Nov 2022 14:25:41 GMT
Date: Mon, 28 Nov 2022 11:30:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a8935783026c10470f60033d3a860f7b
65941dd34eb1063a3f7fe2b6790a11a484a06b9a
e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11165
x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_JE2VIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: SFO5-C3, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lu-Pi2xJUPfkpTK0vCDauedxSM1ZrNzEKka2-4m6l7pDkt04gUgpnA==
via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:40 GMT
etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a"
content-type: image/jpeg
age: 48807
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:11:39 GMT
age: 11908
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa0bb072-3065-47f5-88ac-e3977adf0cba.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa0bb072-3065-47f5-88ac-e3977adf0cba.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7d70dfcfffed4941f9766906c52776c
cd268c0301ee9ec2de1aaaf5fff3efede4973916
024dcb67aca1c6491ca045b1384b623ff934362b77bac2916ad2744e5c6c4bd2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa0bb072-3065-47f5-88ac-e3977adf0cba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3532
x-amzn-requestid: 12f95833-5aca-4633-8eac-011f194953ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJWisFi5IAMFgCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63806add-77d024405c7fe57124c4ae1c;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 07:12:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FfwgJjX9r1rqeeN9Va2apka3gXe6L610KxF8UHT5AzbM-wZtMqQDBA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:43:12 GMT
age: 13615
etag: "cd268c0301ee9ec2de1aaaf5fff3efede4973916"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 15bd53848c7082464273007e010c54e0
9a3ca698ca1aeae695923277ed2244465e01a1ea
36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10119
x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR782HEZIAMFTKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:54:37 GMT
age: 48930
etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 48521
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 48531
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.kesmerchantservices.com/wp-admin/admin-ajax.php?action=wpsc_validate_customer
162.144.186.188200 OK 56 B URL HTTP/1.1 www.kesmerchantservices.com/wp-admin/admin-ajax.php?action=wpsc_validate_customer
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JSON data\012- , ASCII text, with no line terminators
Hash 32eabc627b49b268343b6969ea667f65
a5ffa486094653b4264bc81d5d265ae58ff11cb9
9f81fa5867600091fe297c9755d7efc5959f898c0cf06d984bef13bb29b32347
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php?action=wpsc_validate_customer HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/json; charset=utf-8
Origin: http://www.kesmerchantservices.com
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
Content-Length: 0
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Pragma: no-cache
Access-Control-Allow-Origin: http://www.kesmerchantservices.com
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Set-Cookie: wpsc_customer_cookie_a6e04e4389f9c187d64e7d4f0bb3aaa3=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Length: 56
Content-Type: application/json; charset=UTF-8
www.biuroadler.pl/js/jquery.min.php?key=b64&utm_campaign=I92930&utm_source=www.kesmerchantservices.com&utm_medium=&utm_content=http://www.kesmerchantservices.com/request-a-quote/&utm_term=Request%20Analysis%20-%20KES%20Merchant%20Services%20Inc.&se_referrer=
79.96.66.195404 Not Found 478 B URL HTTP/1.1 www.biuroadler.pl/js/jquery.min.php?key=b64&utm_campaign=I92930&utm_source=www.kesmerchantservices.com&utm_medium=&utm_content=http://www.kesmerchantservices.com/request-a-quote/&utm_term=Request%20Analysis%20-%20KES%20Merchant%20Services%20Inc.&se_referrer=
IP 79.96.66.195:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (823), with no line terminators
Hash 3846ea7756382fece04e63c8601dc350
866129edab5f87326b12328d63697fd18e5ce208
5f3187ce1e46fb9cb68d8c67c67dbea7020d3f6792472746ecf3c1f178d345bb
GET /js/jquery.min.php?key=b64&utm_campaign=I92930&utm_source=www.kesmerchantservices.com&utm_medium=&utm_content=http://www.kesmerchantservices.com/request-a-quote/&utm_term=Request%20Analysis%20-%20KES%20Merchant%20Services%20Inc.&se_referrer= HTTP/1.1
Host: www.biuroadler.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 11:30:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: IdeaWebServer/5.1.0
Content-Encoding: gzip
fonts.gstatic.com/s/coda/v21/SLXHc1jY5nQ8FUUGaw.woff2
216.58.207.195200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/coda/v21/SLXHc1jY5nQ8FUUGaw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 20896, version 1.0\012- data
Hash 12d73db5dfb398dccb52b2035bb42a7f
2e00273693f6f1e2b73bf05893d32d2d76021f06
d5543b71f8de87f3284aaf0051aceacd5bf286018c0881e484afb4753849908c
GET /s/coda/v21/SLXHc1jY5nQ8FUUGaw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kesmerchantservices.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20896
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 13:07:00 GMT
Expires: Thu, 23 Nov 2023 13:07:00 GMT
Cache-Control: public, max-age=31536000
Age: 426187
Last-Modified: Thu, 21 Apr 2022 16:40:25 GMT
Content-Type: font/woff2
www.kesmerchantservices.com/wp-content/themes/small-business/images/listicon.gif
162.144.186.188200 OK 1.9 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/images/listicon.gif
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 10 x 11\012- data
Hash dc84047b52b0d7b565d690c25f29b60a
3c1e44a01a136438cad6392148962ec2c5d0c617
e16e20dfbe89575f3000974e5f1bbe7665b3aa9d65c066f5ce4fd6f1182d71ff
GET /wp-content/themes/small-business/images/listicon.gif HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/wp-content/themes/small-business/style.css?ver=1.7
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:35:34 GMT
Accept-Ranges: bytes
Content-Length: 1896
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/gif
www.kesmerchantservices.com/wp-content/themes/small-business/images/btn.png
162.144.186.188200 OK 1.2 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/images/btn.png
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 16 x 35, 8-bit/color RGB, non-interlaced\012- data
Hash 9f3d84e638d4ca3aa712c25ae5aea79a
09c9fef33d52251d012a039b294ca07b402e9a36
b48e6f1c696833ef0e6c3e938c64c69c6e76cb18ec09716c9c8e57d787e26914
GET /wp-content/themes/small-business/images/btn.png HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/wp-content/themes/small-business/style.css?ver=1.7
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:35:35 GMT
Accept-Ranges: bytes
Content-Length: 1184
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/png
www.kesmerchantservices.com/wp-content/themes/small-business/images/search.png
162.144.186.188200 OK 1.6 kB URL HTTP/1.1 www.kesmerchantservices.com/wp-content/themes/small-business/images/search.png
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 47df1a12bd263ec9777d55161f65cb82
723633ba73bf5afc0d667a6dc7ef35cec8bdbc5d
80c6affdb984ab8b039671532487c69cab36a1f196cf1209a1463264e4734334
GET /wp-content/themes/small-business/images/search.png HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/wp-content/themes/small-business/style.css?ver=1.7
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:07 GMT
Server: Apache
Last-Modified: Wed, 24 Jun 2020 10:35:36 GMT
Accept-Ranges: bytes
Content-Length: 1608
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:07 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
Content-Type: image/png
www.google-analytics.com/ga.js
142.250.74.174200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Mon, 28 Nov 2022 11:05:59 GMT
Expires: Mon, 28 Nov 2022 13:05:59 GMT
Cache-Control: public, max-age=7200
Age: 1448
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1711231936&utmhn=www.kesmerchantservices.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Request%20Analysis%20-%20KES%20Merchant%20Services%20Inc.&utmhid=130843172&utmr=-&utmp=%2Frequest-a-quote%2F&utmht=1669635007453&utmac=UA-42401157-1&utmcc=__utma%3D222576641.439731271.1669635007.1669635007.1669635007.1%3B%2B__utmz%3D222576641.1669635007.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=2134571068&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
142.250.74.174200 OK 35 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1711231936&utmhn=www.kesmerchantservices.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Request%20Analysis%20-%20KES%20Merchant%20Services%20Inc.&utmhid=130843172&utmr=-&utmp=%2Frequest-a-quote%2F&utmht=1669635007453&utmac=UA-42401157-1&utmcc=__utma%3D222576641.439731271.1669635007.1669635007.1669635007.1%3B%2B__utmz%3D222576641.1669635007.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=2134571068&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP 142.250.74.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1711231936&utmhn=www.kesmerchantservices.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Request%20Analysis%20-%20KES%20Merchant%20Services%20Inc.&utmhid=130843172&utmr=-&utmp=%2Frequest-a-quote%2F&utmht=1669635007453&utmac=UA-42401157-1&utmcc=__utma%3D222576641.439731271.1669635007.1669635007.1669635007.1%3B%2B__utmz%3D222576641.1669635007.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=2134571068&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Mon, 28 Nov 2022 11:30:08 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
www.kesmerchantservices.com/favicon.ico
162.144.186.188200 OK 822 B URL HTTP/1.1 www.kesmerchantservices.com/favicon.ico
IP 162.144.186.188:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PC bitmap, Windows 3.x format, 16 x 16 x 24, image size 768, resolution 7874 x 7874 px/m, cbSize 822, bits offset 54\012- data
Hash e1e8bdc3ce87340ab6ebe467519cf245
6cd6fa4c9ccb80024d57721a3914ef18206fda4c
c3aece6f00821bd986da195aa15e2b0891b2c81a862cccf2a3069204b9a92186
GET /favicon.ico HTTP/1.1
Host: www.kesmerchantservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kesmerchantservices.com/request-a-quote/
Cookie: PHPSESSID=3ec0351ff110fd941f37483dd5a16343
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 11:30:05 GMT
Server: nginx/1.21.6
Content-Type: image/x-icon
Content-Length: 822
Last-Modified: Wed, 24 Jun 2020 10:41:36 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Tue, 28 Nov 2023 11:30:08 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Endurance-Cache-Level: 2
X-Server-Cache: false