store.camersoftware.com/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 23 Nov 2022 00:14:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://store.camersoftware.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8297
Expires: Wed, 23 Nov 2022 02:32:24 GMT
Date: Wed, 23 Nov 2022 00:14:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b59d95402dfb464c176610284ba13f65
1a6c62fb0d48654dd204b66161bb03fefe60f71a
40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2635
Cache-Control: max-age=126062
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 00:14:08 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 11:15:10 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 00:09:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 284
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11378
Expires: Wed, 23 Nov 2022 03:23:46 GMT
Date: Wed, 23 Nov 2022 00:14:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7oa1HVIUw341iD5AGRbCb94F83H/g2MQdqpYU5ji9rCkf7QFBd8/zen4fJ3/6ZObVDPtOSi1aNk=
x-amz-request-id: BF19RAQP1NCJ0D0M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 23:39:45 GMT
age: 2063
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03250604a98d87233d5f02595a3a09da
5726c66a86b763d61fc1890c9b4832cb7f06e44c
e9df1800839142a38d2cb491b93c2a34fc9e39cf8534751ad74ffbd7beb25d38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9DF1800839142A38D2CB491B93C2A34FC9E39CF8534751AD74FFBD7BEB25D38"
Last-Modified: Tue, 22 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 23 Nov 2022 06:14:08 GMT
Date: Wed, 23 Nov 2022 00:14:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 00:08:53 GMT
cache-control: public,max-age=3600
age: 315
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8a181d95550cfdf3b1fc4deb71631e40
37866f7293c41fbfb817e321754cae5c5bf59f93
6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3566
Cache-Control: max-age=121933
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 00:14:08 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 10:06:21 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lS9ovKVNZmYZmEpXLquxZg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MD83k8ZeL5rnuswOSBwMW9UsqVk=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6359
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Wed, 23 Nov 2022 00:14:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6359
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Wed, 23 Nov 2022 00:14:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6359
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Wed, 23 Nov 2022 00:14:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6359
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Wed, 23 Nov 2022 00:14:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6380f73d47906bd63b9c48137e4df61
94e053461d2db89e9d08321f26a2555ebcd7e0b9
84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 175363fa-bb7a-4c95-8aa4-ebb3f16f3745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1lI3HaqIAMFmTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63788238-1bb736b52bbae37c5e19486f;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 39Lmple6qq9vrKeKJ4lcditVdK5XfRFtv3Cs0_R8B7pVDYPiRAGFtg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:13:08 GMT
age: 7262
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a31b1f7-5b4e-41c3-a823-4b79b831c0f5.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a31b1f7-5b4e-41c3-a823-4b79b831c0f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 218956a7601433bcf0f6ff484dbd5b52
d005c3afc835a854efdfa9cceb54b81153bb9899
dcc6527a7705c8e870e6aaf6744319ba0541a9fdfef58ca897361309d11b2b2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a31b1f7-5b4e-41c3-a823-4b79b831c0f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6180
x-amzn-requestid: 77d0b21a-db56-431c-8bc1-15ce409beadd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b7nE2FyqIAMFnEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637aebb8-6661a45a00c174e87e789791;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 03:08:40 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 4i-DyxmOE3pf55HCp1_oYxYPupFwEdMiQH8YRPQlyj-HMHtlRUfS4g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 74ab105148338444981d1b2277ffd9c4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 03:57:57 GMT
age: 72973
etag: "d005c3afc835a854efdfa9cceb54b81153bb9899"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ngJvyUydpRDSiYy9kfeh8JmydmR_K8mjfZtGLgT0qeE2JaABbDMSaQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:28 GMT
age: 8262
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19d78a60-e0f0-4143-8860-934548b7f5d4.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19d78a60-e0f0-4143-8860-934548b7f5d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5fe889ae2db174ec39ba42339b1cc1f8
f420e43f4350d7f1469ae35537bdd3cc747152b0
cab9aff75d385706be812e6cd1998d3db1ba99e44f9cde432acd50dcb1b90df7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19d78a60-e0f0-4143-8860-934548b7f5d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5913
x-amzn-requestid: ad2f2886-9624-4616-b1a6-7a21d4f00b71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcR_FGbIAMFQQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d40d9-7a36067b0567b3a43cfe6312;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:36:25 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ltx0v2BDLutKfMy_vg1DSN87k8YT0EJiRMO4rI_q5oCJVCegpjiVlw==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:45:19 GMT
age: 8931
etag: "f420e43f4350d7f1469ae35537bdd3cc747152b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bb607df-5b5a-43e1-b231-82f686c992d5.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bb607df-5b5a-43e1-b231-82f686c992d5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f5082fa91cc778a495716efefee2f6e4
f43120e62c6bee31e8dd9654da5d4da39e649121
f88beaf140e9105c67463a7c0e78018849670984c79ee32ad363b29973001b0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bb607df-5b5a-43e1-b231-82f686c992d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8010
x-amzn-requestid: b66b7ab8-4300-437e-924a-cc134a506cab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bu-1QGqAoAMFwHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375de87-4fad3dd44238a4a85270e1cd;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:11:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BYVD3OWGNwMuTAavponj0yhWWhiP8PISWpE2sAYcAbQzI5oM0offcw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:57:15 GMT
age: 8215
etag: "f43120e62c6bee31e8dd9654da5d4da39e649121"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cce27a1fe8c0222811a5ce0e7f89e1cb
28c165bac8cf68cd1b0763c311aece00672cb3a5
4530e34a47ef78c2c2b0d34a0511253a61f1927b192ab42f82361002ff10819e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9376
x-amzn-requestid: a00f5ff7-02af-40e4-9f40-2814025de9db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b42xTFSEIAMFt2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d1a1-783544906babf838250f304e;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:05:05 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 9V7tmwd73b953mOccy4ESy8rFwDUOEb90oS7KsT05eaOJmdDrgfh5g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 07:28:09 GMT
age: 60361
etag: "28c165bac8cf68cd1b0763c311aece00672cb3a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5
200 OK 299 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5
IP
Hash 1e34ceaa9a4c96c3499483f5fe818671
55a92f1196d0155e2bf0632f0905b5b8000f5ad7
9738e8e5222b5802082be7a77e56ad9fdee06718da410f356504184fd08b56bf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
content-length: 299
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:49:45 GMT
etag: "2b5-5d851dc6bb94c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.10.4
200 OK 256 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.10.4
IP
File type ASCII text, with very long lines (407), with no line terminators
Hash 25eb868b79267c417ba90c9c40713894
88c9b6fbbfbb5ccbe881143dcd81650ecdfa8dc8
5615b76ed49dc6445ef53c12d8998ec9c8cb45f73f76f1fab0a37e190a97a15f
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
content-length: 256
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "197-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.10.4
200 OK 425 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.10.4
IP
File type ASCII text, with very long lines (1002), with no line terminators
Hash 126ee13d2c9ac35d1b85dfe2918a3825
124c6c60e909381f9fca156876342d1d2b708b19
98dac52a015d3430abe981c02bd17e035f14399b5c64cecd90d7556335a0e341
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
content-length: 425
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "3ea-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 00:14:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 00:14:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.10.4
200 OK 313 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.10.4
IP
File type ASCII text, with very long lines (665), with no line terminators
Hash 994f756b6d1b3f5a8d901125a1a98d6a
8ac084b1e23dad2ad2299543daf432571fd4e250
70eb8d3cfd7a17ade811bcf0dc3aeb83619daf551cc51ef20b140b341a3571ce
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
content-length: 313
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "299-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.0.5
200 OK 374 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.0.5
IP
Hash 99f478aea66ce928c3dda9ab3a0dbbb3
29bb3e5ccb81defba6cf1749768f4c57533e261a
44b0fdb4d849dfa85411e2e814e8352a89f04fad8e65924f477368dad133955e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.0.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
content-length: 374
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 19:19:24 GMT
etag: "3e0-5d84fc2c00631-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/CS-bg-15.png
200 OK 14 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/CS-bg-15.png
IP
File type PNG image data, 1728 x 1228, 8-bit/color RGBA, non-interlaced\012- data
Hash 883c6bf53db0c37b7ba7260eba730268
4b39c1963c1ebde2189953234c2507c4313b9efd
7ef454b2a03530e2879bdffb58f1a79672325bd04d172be9400fcab5c6577c5d
GET /wp-content/uploads/2020/01/CS-bg-15.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 14041
last-modified: Fri, 18 Feb 2022 19:26:20 GMT
etag: "620ff2dc-36d9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/ptz-NO-BACKGROUND.png
200 OK 321 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/ptz-NO-BACKGROUND.png
IP
File type PNG image data, 966 x 1230, 8-bit/color RGBA, non-interlaced\012- data
Size 321 kB (321112 bytes)
Hash 4817f3753d06b75dbc7862f13c0f81b0
93e5d21a4b8e231a5f07315502a4e7540f273922
f071653cd686d0fefbef345514898aeb6dbbb0fc77fa21f75a2e021f48946362
GET /wp-content/uploads/2020/01/ptz-NO-BACKGROUND.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 321112
last-modified: Fri, 18 Feb 2022 19:26:49 GMT
etag: "620ff2f9-4e658"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/08/Camer-Software-logo-Digital-Solutions-Black_No_Background_1200px.jpg
200 OK 336 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/08/Camer-Software-logo-Digital-Solutions-Black_No_Background_1200px.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 4000x1667, components 3\012- data
Size 336 kB (335869 bytes)
Hash a4712b1d075a66e63960053280b39b4d
9da78abf8d3d789cd70c1c2b91c59eec871dec15
015b0ad5144140df75a4ecebd42d8908a10d055fca27e883510917b1d188811d
GET /wp-content/uploads/2019/08/Camer-Software-logo-Digital-Solutions-Black_No_Background_1200px.jpg HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/jpeg
content-length: 335869
last-modified: Fri, 18 Feb 2022 19:23:04 GMT
etag: "620ff218-51ffd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/H0f6a0ac935b24277b357b31dd6ffe4f42-no-background.png
200 OK 356 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/H0f6a0ac935b24277b357b31dd6ffe4f42-no-background.png
IP
File type PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced\012- data
Size 356 kB (356220 bytes)
Hash 36ead2927ac16da0c2a8fcaee4dbe887
bcfbdc2600e82b04fd544ac451fcc00a00e9810d
1e2b21e284d85833a0296b9e546a9bb07f8ba502df58c66b299ffc83b65b20f5
GET /wp-content/uploads/2020/01/H0f6a0ac935b24277b357b31dd6ffe4f42-no-background.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 356220
last-modified: Fri, 18 Feb 2022 19:26:21 GMT
etag: "620ff2dd-56f7c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/5e11961ed7116.png
200 OK 335 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/5e11961ed7116.png
IP
File type PNG image data, 1000 x 667, 8-bit/color RGBA, non-interlaced\012- data
Size 335 kB (335371 bytes)
Hash 779a058a2b0d35704cf0567e998838e4
983ebed5587563a996d7cbe3dad2440b719db13b
7cbb2c3bc1e873c895de268f2386b2b150ada5d051c9b8d02394f18f2e2213ad
GET /wp-content/uploads/2020/01/5e11961ed7116.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 335371
last-modified: Fri, 18 Feb 2022 19:25:37 GMT
etag: "620ff2b1-51e0b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/wp-store-locator/css/styles.min.css?ver=2.2.235
200 OK 62 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/wp-store-locator/css/styles.min.css?ver=2.2.235
IP
File type ASCII text, with very long lines (14979), with no line terminators
Hash 3c62027b964e48c69dfcbba66f2d75c3
89bd797df204b00541d1d0b3b61ce9a1e20f5669
512de0e45db1f520ee215d59ec5b05ea6fde917ba2aac2f3e0fe9391d33f3d6e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-store-locator/css/styles.min.css?ver=2.2.235 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:52:25 GMT
etag: W/"62101519-3a83"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
200 OK 13 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6
IP
File type ASCII text, with very long lines (9281), with no line terminators
Hash a7327bac429d9863fbb6a3374685045d
f5de024ece7f42d18e595cd310f327201236d296
b65dafcf56a341adf254be60b526ad58a266bb736925c9568a2d062c2c812c8c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-2441"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.css?ver=2.4.2
200 OK 67 kB URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.css?ver=2.4.2
IP
Hash f6fb07ac1c91197216ffd557f1ad15d0
22f863d3f329838dc217ae169febd2a54724a24a
2665c7a81cfc36efe96008c1d3775d221082e945200e1e29f70fa4d58c803431
GET /wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:49 GMT
etag: W/"620ff209-d14f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.0.9
200 OK 15 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.0.9
IP
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash b5a3f9d0be768775c23ec9085f50f925
16c17cda949058afd0107c5668de5e7352d51cc9
2b3e800748f45115b2e450dac97b8537a96f4e6cfa3f95876c432d07c4c530e3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.0.9 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:20:33 GMT
etag: W/"620ff181-daf1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/style.min.css?ver=2.4.2
200 OK 65 kB URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/style.min.css?ver=2.4.2
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash eb569982f0a28cbd0f42b2a99c8d9e24
3a9cddeeefbd6bc7174269c8f2960ea9b1c35571
0c86f6496cdc1cf80b899845d7fecc69796dc82f80c0b2fccb83ff5e69c52a5d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/style.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:52 GMT
etag: W/"620ff20c-510ac"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/acer-logo-F23626AD07-seeklogo.com_.png
200 OK 9.5 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/acer-logo-F23626AD07-seeklogo.com_.png
IP
File type PNG image data, 300 x 78, 8-bit/color RGBA, non-interlaced\012- data
Hash 83b7592afcfc3fe03bfc081458a20fd8
9a39f1d8faaee6788b3a969b22348664c326a5a8
863b6b95c043dc6b5f42ad4fd51c836bb70d953ec61aad18b74fb2e8f10cb46a
GET /wp-content/uploads/2019/12/acer-logo-F23626AD07-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 9476
last-modified: Fri, 18 Feb 2022 19:25:19 GMT
etag: "620ff29f-2504"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5
200 OK 12 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5
IP
Hash 163cddd34f8e23f171c16291b6fe570b
c244df0e747ad8f9306b26959420afc6368dd123
156ca5192ebb23cbcab750ae9421ebb86770e2dc43add9ec3328bf176f0f05cf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:13 GMT
etag: W/"621021b5-aab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2019/12/dell-logo-49B6BF5FC9-seeklogo.com_.png
200 OK 18 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2019/12/dell-logo-49B6BF5FC9-seeklogo.com_.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 8dac90ee36d3e20aa38fe0ae9e059a74
5e1b834cba15f14de6058b38d2ab47441b171f6e
a34aaff9a39b5c69583cc1e1c9721ebe5f25854a0c2991875edcc3b0e51f26f3
GET /wp-content/uploads/2019/12/dell-logo-49B6BF5FC9-seeklogo.com_.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 18259
last-modified: Fri, 18 Feb 2022 19:25:19 GMT
etag: "620ff29f-4753"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/bootstrap.min.css?ver=2.4.2
200 OK 25 kB URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/bootstrap.min.css?ver=2.4.2
IP
File type ASCII text, with very long lines (65363)
Hash 0cae88681437774f320a2f21b8a0f18d
704dca2a6e7b212b8234b4f210adbe24ed011f2e
523286bec41094ea0b642fa29dcfed3c300849bb8b539ed4b2478d67493680c4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/css/bootstrap.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:46 GMT
etag: W/"620ff206-1754b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=5.9.5
200 OK 659 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=5.9.5
IP
Size 659 kB (659372 bytes)
Hash eb8777363572e237c6748062dc0ca0fa
b2c2b9ee97963017f39de7978f464528da327f23
0d3066ab0b21bb496e4ced312b29e33c6e77b4ed3d06dace856b1356c9112f71
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-compare/assets/css/colorbox.css?ver=5.9.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:34 GMT
etag: W/"620ff1fa-ee4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 00:14:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js?ver=6.0
200 OK 48 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js?ver=6.0
IP
File type ASCII text, with very long lines (32005), with CRLF line terminators
Hash 65266c81d537a67762a83d5d1696c19e
67c64f42e03d14cae67957ef442e59fd2fddb08f
7da2dce92cef3d8e92a644265f3d0a1d187e151e52c003a4645eb8ec2216d838
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js?ver=6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:20:34 GMT
etag: W/"620ff182-24ba4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=6.7.3
200 OK 89 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=6.7.3
IP
File type ASCII text, with very long lines (4933), with no line terminators
Hash 20ce3ff5663a809a269a12f03294d88d
6cbe2c60bcb211008adc555c604be97743340b84
8b72c604f73cfdb965e28558168b589351303f93ab6675acb87cd07d750efdd7
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=6.7.3 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:37 GMT
etag: W/"621021cd-1345"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.6.0
200 OK 110 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.6.0
IP
File type ASCII text, with very long lines (29253), with no line terminators
Size 110 kB (109717 bytes)
Hash de5ed54a3c99198e85db434182a760c8
0b5920699ee4f0d2f9777468232433c958d7ef52
49817b26f1b01fbae396214722fef69aec73d8c9bd44db18aa18d35ae6de1c76
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-7245"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
200 OK 4.2 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0
IP
File type ASCII text, with very long lines (2630), with no line terminators
Hash 76cfb37c13557205d23c95adc62cdc13
f4e59fa2968c562c3cfee7eb8e8338158f036485
15b190623abf84507bbd08265bfe9c75049650a3663ee03629485a04b64d2f21
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-a46"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/download-1-e1577984602239.png
200 OK 1.2 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/download-1-e1577984602239.png
IP
File type PNG image data, 75 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash 595a85c915043f7f7ae5935c791e0022
fc2e9ea765dadf18dc2c6234771bf715cb355a87
b5ac98792e19b9fba89909591c783638788abd33b0c8ec5c14d73f43035b10e2
GET /wp-content/uploads/2020/01/download-1-e1577984602239.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 1234
last-modified: Fri, 18 Feb 2022 19:26:48 GMT
etag: "620ff2f8-4d2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/download-e1577984626615.png
200 OK 3.6 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/download-e1577984626615.png
IP
File type PNG image data, 76 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e342dc9894f3896683cbef41c621047
ea2305358c3316e4f9e9b52459f08c9aa7139067
11280207d6282dd31469a71fc23f2e367a8427881595050dfd8e0bc04af902fa
GET /wp-content/uploads/2020/01/download-e1577984626615.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 3565
last-modified: Fri, 18 Feb 2022 19:26:48 GMT
etag: "620ff2f8-ded"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/gtranslate/flags/16/en.png
200 OK 707 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/gtranslate/flags/16/en.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e4896565595fc22e344fd619c0ed15bb
43d4481a4cc3e60b406b2467b5f7e576fcbae260
c3a4cb8f32ef0cd89e6429d40d1faebd359e02e34d69764052c8402a391e9a00
GET /wp-content/plugins/gtranslate/flags/16/en.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 707
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:49:45 GMT
etag: "2c3-5d851dc6aa00b"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/2020/01/5e1196ca9fe6a.png
200 OK 383 kB URL HTTP/2 store.camersoftware.com/wp-content/uploads/2020/01/5e1196ca9fe6a.png
IP
File type PNG image data, 1000 x 702, 8-bit/color RGBA, non-interlaced\012- data
Size 383 kB (382785 bytes)
Hash 68adcdfdbf8a7bafb5c0531e0e4a7ee7
eeca98034105c5ba628fc728b5f144af28386068
0d59142caa855c3e8b0e3e2344698b6cabd18eb0ffd87f3b492a433eca2e61fb
GET /wp-content/uploads/2020/01/5e1196ca9fe6a.png HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: image/png
content-length: 382785
last-modified: Fri, 18 Feb 2022 19:25:37 GMT
etag: "620ff2b1-5d741"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=6.7.3
200 OK 234 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=6.7.3
IP
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Size 234 kB (233628 bytes)
Hash 7ac67080a040449034a7e7b502197a04
1ecc4fa7e88fcc8101b562d46476f2afddb78ee1
1c207b979fb21fa4de9da30b89086d6508637e14bc6573fc1eed270e4a0190c6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=6.7.3 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:46:37 GMT
etag: W/"621021cd-32f4b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2
200 OK 19 kB URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2
IP
Hash 5a3f2af332753759dc5cb0402bfe3621
da30380795a37ff34c35b66243113b83d4d8cbf1
f0dd57442e9c54518b439846b08a1be5f6adcec102a44ba2a6b36baf997a44e4
GET /wp-content/themes/electro/assets/css/font-electro.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: W/"620ff207-c0a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
200 OK 5.6 kB URL HTTP/2 store.camersoftware.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
IP
File type ASCII text, with very long lines (15224)
Hash e8c91a352352cd8583ccbf4d20bafb2c
b5fc874c4bf799bff2ed073d1d7fa4d31c664069
656d5a2d034eec98deacd113cab8bdfbb05d467c9ed3ffddb9988a6a0b41a564
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 21:23:52 GMT
etag: W/"636582e8-50fd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/fontawesome/css/all.min.css?ver=2.4.2
200 OK 19 kB URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/fontawesome/css/all.min.css?ver=2.4.2
IP
File type ASCII text, with very long lines (55782)
Hash 081b3dad7707ed4296e14bd39ff150a3
5522c13e362d058a3e11ba37355b749535944bda
bc78133bc325231d205817846a9e088d346e07adbcec8b4b68c87c55c2be7d15
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/vendor/fontawesome/css/all.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-da9f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.10.4
200 OK 388 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.10.4
IP
File type ASCII text, with very long lines (749), with no line terminators
Hash d76e241cef980ac70dd7ec2f0ad73c4f
7d86336411783515586920ef3dd3d59d133b6a6e
38b084b6db9415e1ffb7f07c96b4266040ab1033803c4fecb21efd55fb37083d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.10.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
content-length: 388
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 21:51:36 GMT
etag: "2ed-5d851e307649b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.6.0
200 OK 6.6 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.6.0
IP
File type HTML document, ASCII text, with very long lines (24731), with no line terminators
Hash cb7075f221eb0c2900374b84be02f4e0
fec0d3b539a1ad2d2a63d0a86206c08468a07b34
07f48eaa86a591905b4e78d84c3083d48ad84227230a9ac4d38ccb10fd16e26e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-609b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/core.maps.css?ver=1.2.8
200 OK 1.9 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/core.maps.css?ver=1.2.8
IP
File type ASCII text, with CRLF line terminators
Hash bdfe5cf116824afe6c9f678c7a352ff1
731cc8aaaf5edbe75d25b03e0810d9ac4f90812b
dca535900e7f299b5991f7558fce9b32c9df07c8a6d0b2c6ef12656d2aa15054
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/core.maps.css?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-1690"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b91e20e8a74cc4a458625c05cd7d775a
fbf6f6389ad80eda288abbb8a19ef48c78721ed0
a2a881f932e97479855850a2ca1f87ec021c1510e59cb3bf0b4c4fa990990077
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2A881F932E97479855850A2CA1F87EC021C1510E59CB3BF0B4C4FA990990077"
Last-Modified: Tue, 22 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21581
Expires: Wed, 23 Nov 2022 06:13:54 GMT
Date: Wed, 23 Nov 2022 00:14:13 GMT
Connection: keep-alive
store.camersoftware.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
200 OK 3.1 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
IP
File type HTML document, ASCII text, with very long lines (9720), with no line terminators
Hash 795df0c0629508f8b3cfceb1329708ed
c268846317f2d8de1438989c97a30ba0256e3605
efca3d027a3a2c067aab5eb9607423c8cc61a20968faa6ba5f4f8ea1c65cc3dd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:13 GMT
etag: W/"621021b5-25f8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6
200 OK 5.4 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6
IP
File type HTML document, ASCII text, with very long lines (21538), with no line terminators
Hash c91894307321318b1484c3b4f18aad7b
31df85df0d2814bd7997265b23fc2a680c378a17
1d1bd6f702e8d636fba6533fb720d11fbb00a8304722f40744b8272da6f8348f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-5422"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.5
200 OK 2.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.5
IP
Hash 31b91b7a337f5b539023576618954f49
ea429cbd084ab7e0e94dca3b95044e995de00f22
0493b12311e5e21018667d2f6fe3316511e16edc18bb9b8b4729d31d132d54d5
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 00:14:10 GMT
date: Wed, 23 Nov 2022 00:14:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
greenskymotions.net/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed18
200 OK 53 kB URL HTTP/2 greenskymotions.net/go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed18
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (29334)
Hash ff0228e5e4c59acfc756fc16e4c29919
e615771b7f7c68d4100b421fc3f417ea50bce626
51cdbe80f3147aaf791720bdf0bd2d7cd05b6ed3e37046d48fdb466ac9f1c68e
Analyzer Verdict Alert fortinet Phishing
GET /go/mu4genjugq5dcmjrhe3a?sub2=dfastspeed18 HTTP/1.1
Host: greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://away.cdnbestplatform.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:13 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=04520e73-e623-485e-91d3-114fe1a97379; expires=Fri, 23-Dec-2022 00:14:13 GMT; Max-Age=2592000; path=/; domain=greenskymotions.net
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
0.greenskymotions.net/favicon.ico
204 No Content 0 B URL HTTP/2 0.greenskymotions.net/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 0.greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.greenskymotions.net/index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed18
Cookie: uuid=04520e73-e623-485e-91d3-114fe1a97379; uuid=04520e73-e623-485e-91d3-114fe1a97379
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 23 Nov 2022 00:14:13 GMT
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.8.2
200 OK 30 kB URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.8.2
IP
File type ASCII text, with very long lines (65493)
Hash ac0afd2628ac1852210f57d0ddfe8caf
76f7624a28754a4e406c55f03ea793fc78f31731
58278eac9d8f63b63cf98e75caf946cdeb81638688b9e997ea6f0db81b80da63
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.8.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:18:39 GMT
etag: W/"620ff10f-307cc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
di4.biz/favicon.ico
204 No Content 0 B IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: di4.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://di4.biz/?auf=mq2gkm3dgu5dcnrqgixtcmjrhe3c6mjzf5tdkmtfmrrdinjpgezc6mjwgy4tcnrsgq2tg&p=b&sub1=&sub2=dfastspeed18&sub3=&sub4=&cpc=0&cpm=0
Cookie: uuid=53af9ce4-90d0-4719-bca8-f8777f5d1a55
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 23 Nov 2022 00:14:14 GMT
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 23 Nov 2022 00:14:11 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+334; expires=Fri, 22-Nov-2024 00:14:11 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.2.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-72a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/electro.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/electro.min.js?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/js/electro.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-50d4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/leaflet.js?key&ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/leaflet.js?key&ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/leaflet.js?key&ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-22526"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-85b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/common.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/common.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/js/common.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-5822"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:54:43 GMT
etag: W/"621015a3-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/core.maps.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/core.maps.js?ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/core.maps.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-4a79"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/engines/core.leaflet.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/engines/core.leaflet.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/engines/core.leaflet.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-3909"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300%2C500%2C400%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300%2C500%2C400%2C700
IP
GET /css?family=Roboto:300%2C500%2C400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 00:14:11 GMT
date: Wed, 23 Nov 2022 00:14:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/leaflet.css?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/leaflet.css?ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/css/leaflet.css?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-371a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.0.9
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.0.9
IP
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.0.9 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:20:34 GMT
etag: W/"620ff182-41018"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:54:43 GMT
etag: W/"621015a3-4b3d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C300%2C600%2C700%2C800%2C800italic%2C700italic%2C600italic%2C400italic%2C300italic&subset=latin%2Clatin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C300%2C600%2C700%2C800%2C800italic%2C700italic%2C600italic%2C400italic%2C300italic&subset=latin%2Clatin-ext
IP
GET /css?family=Open+Sans%3A400%2C300%2C600%2C700%2C800%2C800italic%2C700italic%2C600italic%2C400italic%2C300italic&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 00:14:10 GMT
date: Wed, 23 Nov 2022 00:14:10 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/engines/core.leaflet.marker.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/engines/core.leaflet.marker.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/engines/core.leaflet.marker.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-1609"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/jquery.easing.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/jquery.easing.min.js?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/js/jquery.easing.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-dab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/pace.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/pace.min.js?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/js/pace.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-303b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/animate.css/animate.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/animate.css/animate.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/vendor/animate.css/animate.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-e283"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0
IP
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-4a6a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/frontend.maps.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/frontend.maps.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/maps/js/frontend.maps.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-1631"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
new.weatherplllatform.com/pick.js?v=11.87.33
200 OK 0 B URL HTTP/2 new.weatherplllatform.com/pick.js?v=11.87.33
IP
ASN #206638 PE Brezhnev Daniil
Analyzer Verdict Alert fortinet Malware
GET /pick.js?v=11.87.33 HTTP/1.1
Host: new.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 27 Oct 2022 17:28:29 GMT
vary: Accept-Encoding
etag: W/"635abfbd-921"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
store.camersoftware.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/html; charset=UTF-8
link: <https://store.camersoftware.com/wp-json/>; rel="https://api.w.org/", <https://store.camersoftware.com/wp-json/wp/v2/pages/2139>; rel="alternate"; type="application/json", <https://store.camersoftware.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.4.16, PleskLin
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/v2.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/v2.min.css?ver=2.4.2
IP
GET /wp-content/themes/electro/assets/css/v2.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: W/"620ff207-48d63"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-35ed"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/uploads/elementor/css/global.css?ver=1604327734
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/uploads/elementor/css/global.css?ver=1604327734
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/global.css?ver=1604327734 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:26:49 GMT
etag: W/"620ff2f9-159a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-3a4f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap-hover-dropdown.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap-hover-dropdown.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/bootstrap-hover-dropdown.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-520"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/core.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/js/core.js?ver=1.2.8
IP
GET /wp-content/plugins/ultimate-maps-by-supsystic/js/core.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-32d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 22:47:05 GMT
etag: W/"621021e9-778b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:19:21 GMT
etag: W/"620ff139-765f9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/css/colors/orange.min.css?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/css/colors/orange.min.css?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/css/colors/orange.min.css?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 19:22:47 GMT
etag: W/"620ff207-9161"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.5
IP
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Fri, 18 Feb 2022 21:49:00 GMT
etag: W/"6210144c-21826"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-bdd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
0.greenskymotions.net/index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed18
200 OK 0 B URL HTTP/2 0.greenskymotions.net/index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed18
IP
ASN #39572 DataWeb Global Group B.V.
GET /index.php?p=mu4genjugq5dcmjrhe3a&sub2=dfastspeed18 HTTP/1.1
Host: 0.greenskymotions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://greenskymotions.net/
Cookie: uuid=04520e73-e623-485e-91d3-114fe1a97379
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:13 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=04520e73-e623-485e-91d3-114fe1a97379; expires=Fri, 23-Dec-2022 00:14:13 GMT; Max-Age=2592000; path=/; domain=0.greenskymotions.net
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/bootstrap.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/bootstrap.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-af1a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/core.marker.js?ver=1.2.8
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/core.marker.js?ver=1.2.8
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-maps-by-supsystic/modules/marker/js/core.marker.js?ver=1.2.8 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:51:20 GMT
etag: W/"621014d8-2fb8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
di4.biz/?auf=mq2gkm3dgu5dcnrqgixtcmjrhe3c6mjzf5tdkmtfmrrdinjpgezc6mjwgy4tcnrsgq2tg&p=b&sub1=&sub2=dfastspeed18&sub3=&sub4=&cpc=0&cpm=0
200 OK 0 B URL HTTP/2 di4.biz/?auf=mq2gkm3dgu5dcnrqgixtcmjrhe3c6mjzf5tdkmtfmrrdinjpgezc6mjwgy4tcnrsgq2tg&p=b&sub1=&sub2=dfastspeed18&sub3=&sub4=&cpc=0&cpm=0
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /?auf=mq2gkm3dgu5dcnrqgixtcmjrhe3c6mjzf5tdkmtfmrrdinjpgezc6mjwgy4tcnrsgq2tg&p=b&sub1=&sub2=dfastspeed18&sub3=&sub4=&cpc=0&cpm=0 HTTP/1.1
Host: di4.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.greenskymotions.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:14 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=53af9ce4-90d0-4719-bca8-f8777f5d1a55; expires=Fri, 23-Dec-2022 00:14:14 GMT; Max-Age=2592000; path=/
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 01:11:04 GMT
etag: W/"624ce8a8-145db"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/js/scrollup.min.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/js/scrollup.min.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/js/scrollup.min.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:48 GMT
etag: W/"620ff208-8ca"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.js?ver=2.4.2
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.js?ver=2.4.2
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/electro/assets/vendor/malihu-custom-scrollbar-plugin/jquery.mCustomScrollbar.js?ver=2.4.2 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:49 GMT
etag: W/"620ff209-16b15"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 21:54:43 GMT
etag: W/"621015a3-195e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 21:23:52 GMT
etag: W/"636582e8-167a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-253d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.2.0
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.2.0
IP
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.2.0 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 22:46:36 GMT
etag: W/"621021cc-b7a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.4.4
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.4.4
IP
GET /wp-content/plugins/yith-woocommerce-compare/assets/js/woocompare.min.js?ver=2.4.4 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:22:35 GMT
etag: W/"620ff1fb-11b0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
store.camersoftware.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5
200 OK 0 B URL HTTP/2 store.camersoftware.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5 HTTP/1.1
Host: store.camersoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:10 GMT
content-type: application/javascript
last-modified: Fri, 18 Feb 2022 19:19:23 GMT
etag: W/"620ff13b-5079"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
new.weatherplllatform.com/stick.js?v=7.77.7
200 OK 0 B URL HTTP/2 new.weatherplllatform.com/stick.js?v=7.77.7
IP
ASN #206638 PE Brezhnev Daniil
Analyzer Verdict Alert fortinet Malware
GET /stick.js?v=7.77.7 HTTP/1.1
Host: new.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://store.camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 00:14:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 06 Nov 2022 00:27:12 GMT
vary: Accept-Encoding
etag: W/"6366ff60-a40"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
82.165.73.164
142.250.74.46
185.177.94.152
91.211.91.114
23.36.76.226
0.0.0.0