firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 21:10:34 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ETCiyKv_HnFvNFC1GcMjrz2vqnciLI0a1U5xmewd5Fp49bEM9spFdA==
Age: 1827
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 96daaf84cd2c07756756caf7a2724a29
d24d47c68eec98d44bf341dab9d893df97103e1a
fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20020
Expires: Fri, 16 Sep 2022 03:14:41 GMT
Date: Thu, 15 Sep 2022 21:41:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nKxaNauYaEsGTjT0ue3G9_RB0DYyXozDeraWmgdwLOcvpFBOX6hV-g==
age: 61547
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 21:41:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 15 Sep 2022 21:03:22 GMT
Expires: Thu, 15 Sep 2022 21:05:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ef5i7P6JsFQP1Nql7ON5OOK5ddCE79xU_l-uiqbakABTLcDFygLarg==
Age: 2260
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5147
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:02 GMT
Last-Modified: Thu, 15 Sep 2022 20:15:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.83.91.138101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.83.91.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EnKgmISim7YncEswwjvobg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: y21+w3fmJLsRn8830yfry/7c5Q0=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7329
Expires: Thu, 15 Sep 2022 23:43:13 GMT
Date: Thu, 15 Sep 2022 21:41:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7329
Expires: Thu, 15 Sep 2022 23:43:13 GMT
Date: Thu, 15 Sep 2022 21:41:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7329
Expires: Thu, 15 Sep 2022 23:43:13 GMT
Date: Thu, 15 Sep 2022 21:41:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f50c34bc30a732593e8fe465055a44ff
af100925cba1be716fd2200715d6136bd7f0c5bc
703049736ccc8815945d69634059c4cd39533417e0969107d460c36a6787c761
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5078
x-amzn-requestid: 6f825856-ec1a-464c-b8ef-f15de0d4017f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeINiGs6IAMFk7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632253f0-647208bf01fe44904b3352f0;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:21:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SJGy4ZhoAlHiv-yUCAnGWG9o2qnl8xhdHhxiwmSvaSP9fdDYOVu_-g==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:22:02 GMT
age: 4742
etag: "af100925cba1be716fd2200715d6136bd7f0c5bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ef9865421a37eae9a4df04083d27485
c7cf1f6a259cece60a34261ec83ee00736e1d72b
723b65ba660f22281f85d6caceea23e9cd932ee9084dc905a08a585746c4c4cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9922
x-amzn-requestid: de1e3e45-74ff-41b2-986f-e78473cb6d98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVc1SGM7IAMFw0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631edb54-2099524d6f2c338b41eea101;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 07:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MtgQUzYMa3mT0lxPhQ5ZCp9XVVyBH8T0dlx_0wSLMZlaFEiCikTXMw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:25:51 GMT
age: 83713
etag: "c7cf1f6a259cece60a34261ec83ee00736e1d72b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:45:05 GMT
age: 86159
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VZ88wGjWdv9DOhonVamk_UnGmavT535eEa4o2sfgskmE0x3QX5iBIg==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:13 GMT
age: 4791
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4833535b1650b0ac875704023b650e66
96ab8cd8e14350f730d26731f3445710324e24e2
d2b5a51e39a4890ba56e819d4d5d1d57d4d3cfc50dde42efdf23b8e9be17d1c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9400
x-amzn-requestid: 8cf35176-18a1-427b-870c-bdae465060c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYM18E-iIAMFcmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ff4f2-427bc0ff6593e71e25b91589;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 03:11:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9ybN4lIqGCbpld1PvmjrIpnYNgHGTSgg6Qc0o8xg-ttlTvX1uNa9dQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:39 GMT
age: 4765
etag: "96ab8cd8e14350f730d26731f3445710324e24e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1633672fad0b564108cf81ad711dc881
d37ad0f40bc1f3f0022467dd0af2478980bd858a
cc7176a297f6009f07074fb9af796132b4452833be675bf378cc950fe81a582a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9071
x-amzn-requestid: b450f7cf-6cc7-4d1f-aef3-4496f0971727
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeIxuEq6oAMF9jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632254d7-6912ef8731d81fa43b805e5b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:25:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6LDUuDX1W8-Q88pDJma0xCAd5QuJ0YV-VpJ_8LVyDHX9YN1k0fQZ8Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:36:39 GMT
etag: "d37ad0f40bc1f3f0022467dd0af2478980bd858a"
content-type: image/jpeg
age: 83065
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.mesquitefloors.com/
172.84.132.151301 Moved Permanently 0 B IP 172.84.132.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 15 Sep 2022 21:41:00 GMT
Server: Apache
Expires: Thu, 15 Sep 2022 22:41:03 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Location: https://www.mesquitefloors.com/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.mesquitefloors.com/
172.84.132.151200 OK 70 kB IP 172.84.132.151:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash f8fd1e8699624b10fc0dab129fbe3d87
3203c5d245654ce7bb837dceafa562bb06654c9e
53f7ecf172b406487a9dabab3169029b4ec6e13bf9ec0190a9bb86cad4b4f3ca
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:03 GMT
Server: Apache
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Cache-Provider: CLOUDWAYS-CACHE-DE
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 69498
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
www.mesquitefloors.com/wp-content/themes/hello-elementor/style.css?ver=2.5.0
172.84.132.151200 OK 3.6 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/themes/hello-elementor/style.css?ver=2.5.0
IP 172.84.132.151:0
Hash 94098d9608754b77ade5fda3d3114979
1347b2013d158c1dec76d4660f3f172c783190c0
ddb0431bb812ca4ec417ac5afe67534263e6c62fb61602961c4732c67398c41e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hello-elementor/style.css?ver=2.5.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3570
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=1659450733
172.84.132.151200 OK 1.3 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=1659450733
IP 172.84.132.151:0
File type ASCII text, with very long lines (4933), with no line terminators
Hash d2d7f4c273d3b4cd972a337969b14754
b441775d1dcba61a5234df0256a40c7f58a8b059
fcfdbdf2a45072bbb545934d419cf76e5272d3193742eb8b659e938cafab4cdf
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=1659450733 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1286
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.7.0
172.84.132.151200 OK 2.6 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.7.0
IP 172.84.132.151:0
File type ASCII text, with very long lines (17809), with no line terminators
Hash d45c9e0b4109fd68bc2eaae40d01f61a
f0fd80fcb3e8b7a9d95782d0f0c79ddc19b2fa96
072aa95bd2ad493914030593b84c611b2dfcc39444f726ddab52751f4b4bf926
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2554
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.7.0
172.84.132.151200 OK 8.9 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.7.0
IP 172.84.132.151:0
File type Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Hash 6c8772ecf168559902155fb7bbbb6ff5
437a2c6b53493b57f4dd490368c53070c903be85
afcaf780edbf3bc69ee80db3e8b9420cc1c7a458b270bf7df979f53a21136288
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8895
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/themes/hello-elementor/theme.css?ver=2.5.0
172.84.132.151200 OK 3.1 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/themes/hello-elementor/theme.css?ver=2.5.0
IP 172.84.132.151:0
Hash 7b4f6124d5a3323502f1f13801fe6101
1a98d372e08debb24dcc0a52c661ce9ed2ff2758
e118f57554300da6bbdfb879a56be49d3cf3b20a3758d2a66ad1d5abbf207bb8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hello-elementor/theme.css?ver=2.5.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3114
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mesquitefloors.com/wp-includes/css/dist/block-library/style.css?ver=e95333f7e53cc584892475bc3c55882f
172.84.132.151200 OK 14 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/css/dist/block-library/style.css?ver=e95333f7e53cc584892475bc3c55882f
IP 172.84.132.151:0
Hash 394ded14baa3c4d46efd70fd32c9736a
c7fbf22ed8dd1212033b33e8a4db5252189e309f
1ad65951d64f0e4f2e5ace1186e004bdb1f5c5e26322b5ad605f97444b92ddc9
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.css?ver=e95333f7e53cc584892475bc3c55882f HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14129
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.16.0
172.84.132.151200 OK 4.1 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.16.0
IP 172.84.132.151:0
Hash 780ca31a157a1edd0aa7295c35ec72ac
93c5fb4b0382c6f21601318d5e177a3ab11ad309
a8c52dafbafda71d36ac70775201fc05a558646f5e4198812482e1b97d45b1cb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.16.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4056
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/elementor/assets/css/frontend-legacy.css?ver=3.7.1
172.84.132.151200 OK 959 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/css/frontend-legacy.css?ver=3.7.1
IP 172.84.132.151:0
Hash 57f8ec1a4933314f588323aebd449e01
1702289fff238aa1111c9d9cf02d12084c64c06a
1ccc3cce93df4d0b84affba87cd4a9d76390a805d2be051e13765864d286d7d2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.css?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 959
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=1659450733
172.84.132.151200 OK 22 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=1659450733
IP 172.84.132.151:0
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash d1c79b3d421c348277ebe3df2678e919
4a4eea8629662b1556e1b7cf793a33b83a98c709
4895dd35591c52a1392ad0e29652a0b01a96ffac7d010d3a672b1ae60b3aaf08
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=1659450733 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 22458
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.7.1
172.84.132.151200 OK 22 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.7.1
IP 172.84.132.151:0
File type ASCII text, with very long lines (1012)
Hash cd17f34dcb5de7bc2f7bbe89b05d93be
c63566968aad0d0150dea133782ec6ca92e31da1
8acfb56cb7d3a49b74711beacb622fe8569e9f31f878e5ed5206f3dfafcba913
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 22541
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-7.css?ver=1660664201
172.84.132.151200 OK 387 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-7.css?ver=1660664201
IP 172.84.132.151:0
File type ASCII text, with very long lines (1178), with no line terminators
Hash bac680e28ce1d9866a7933df0e45529b
b8c3beb4f3a70e02378ad0be9aa03f7a65fef844
8a4820e050987a656c21b3626dd8be3e9a5fa0c51c7c8dbf372a56bdc4602ff3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-7.css?ver=1660664201 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 387
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/global.css?ver=1660664202
172.84.132.151200 OK 3.5 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/global.css?ver=1660664202
IP 172.84.132.151:0
File type ASCII text, with very long lines (26321)
Hash 7be03582fc0510f5d81d6dfad03dafdb
7bd813526bf6200ef45710be90addf7d9722ab3c
91a7cd44578ca8979f84e228ac15d0be7206e65ff0f03dea65d12738485642cb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/global.css?ver=1660664202 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:42 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3548
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-41.css?ver=1660665610
172.84.132.151200 OK 4.9 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-41.css?ver=1660665610
IP 172.84.132.151:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 520cecd62037f38a7defee5aab3bb665
d412d4c660f752aacfee23a8a32222019dfbab1d
1e138d17d58f0e1c47dbcb53d8428c0e1a11787ebb04ae7ba71c5d28127437ea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-41.css?ver=1660665610 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 16:00:10 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4947
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-16.css?ver=1660664202
172.84.132.151200 OK 2.2 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-16.css?ver=1660664202
IP 172.84.132.151:0
File type ASCII text, with very long lines (11262)
Hash f020b9600bc219cbb5000c0b22edbab6
b581dbc02b01bf9b31c4184a57fb7bd3881a69ed
abc625f074ab5711cb781968371dc80106c607e541c1834143cec97e0daf83b1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-16.css?ver=1660664202 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:42 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2196
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-4397.css?ver=1660664202
172.84.132.151200 OK 2.7 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-4397.css?ver=1660664202
IP 172.84.132.151:0
File type ASCII text, with very long lines (33138), with no line terminators
Hash e00a1381322f4717ab61f1d56562572b
ee9705ce68a0368de6e482ddd95dc2fe7e5bd5cd
d2fb226a1f17adab75e353721282dc58661de8d60cb49d6b206c844c154b8ead
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-4397.css?ver=1660664202 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:42 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2728
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-3075.css?ver=1660664203
172.84.132.151200 OK 761 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-3075.css?ver=1660664203
IP 172.84.132.151:0
File type ASCII text, with very long lines (6051), with no line terminators
Hash 933dd3ed8572b5173c12d532954d3ded
30901411d3efb4d208ba6879e8a4674aba2eef0a
ffd5f45dbd25c25c55eadc0516b5da2cd99b97a95ea63068368e722b206247f2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-3075.css?ver=1660664203 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 761
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 91dad4479f7dcb623266cf0dcfef5875
9fcf1f0e16c17a43021ab8fb01089d2d9c9f1d3a
0dc4f9c3ecdccb7e1b7a651c72ee63acc06482b362f060547534c3196e561412
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=explicit&ver=3.7.2
142.250.74.164200 OK 557 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit&ver=3.7.2
IP 142.250.74.164:0
File type ASCII text, with very long lines (852), with no line terminators
Hash 9ad685e3d01b0036bb8f8e30b595319f
f0b09266e6afa82a0e5a55ac54fa457852fc7ba2
43b843f3e3769414de1b6c92b9df34844f3e40fd235165a24a66276c4d96f03c
GET /recaptcha/api.js?render=explicit&ver=3.7.2 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 15 Sep 2022 21:41:06 GMT
date: Thu, 15 Sep 2022 21:41:06 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 557
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-2977.css?ver=1660664203
172.84.132.151200 OK 536 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-2977.css?ver=1660664203
IP 172.84.132.151:0
File type ASCII text, with very long lines (2503), with no line terminators
Hash e765b8e6f76ad209cc7b7ec093017661
21aff68b80c9e6401e957ed41db75bea97731511
5649fd8d3b74105999c16134e17f0813b75ef02be3d4d52406d009b06017a498
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-2977.css?ver=1660664203 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 536
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1648.css?ver=1660664203
172.84.132.151200 OK 1.3 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1648.css?ver=1660664203
IP 172.84.132.151:0
File type ASCII text, with very long lines (17933), with no line terminators
Hash 6662022f5aaba1a85380148e8cf518a8
1165b140a20da14662f89ec5065f92c0fd6e10c4
0efd62d6af6fedd94ede411a6e9cfaeee8f381262783d5e69f6dd3e434c2235a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1648.css?ver=1660664203 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1271
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/css/frontend.css?ver=3.7.2
172.84.132.151200 OK 49 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/css/frontend.css?ver=3.7.2
IP 172.84.132.151:0
File type ASCII text, with very long lines (466)
Hash aed07b3680e2417b40742833c1cae2e6
45162df78be623836ffdebba0bc31f0f3ba33138
50f178a35c9c285ee005282e946dea1c0065f50f621f9ecd9c97015f48928f91
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/css/frontend.css?ver=3.7.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 49348
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1645.css?ver=1660664203
172.84.132.151200 OK 800 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1645.css?ver=1660664203
IP 172.84.132.151:0
File type ASCII text, with very long lines (7615), with no line terminators
Hash 0e6a166e1417895824341b51e894bfa6
25ee54f1c915be542cfb5b38d2c65a814ae98c39
d6c4a73a16ff9b297b9c09d5d886386e2f4f3a06a9506efb309421b095d481ba
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1645.css?ver=1660664203 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 800
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1642.css?ver=1660664203
172.84.132.151200 OK 1.4 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1642.css?ver=1660664203
IP 172.84.132.151:0
File type ASCII text, with very long lines (18779), with no line terminators
Hash 11facba7fc08473fe1715c8c5bce7076
d52d75cb821abff799f8b06348aee3882fd90b8f
d2d68bb335e9489631d37cb1ae2fa4ebc3f89e612e4012385872e00adf356256
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1642.css?ver=1660664203 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1400
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1632.css?ver=1660664204
172.84.132.151200 OK 2.3 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1632.css?ver=1660664204
IP 172.84.132.151:0
File type ASCII text, with very long lines (42369), with no line terminators
Hash 91e4e41fab53c588c392bb0a623fc837
02057cc7881c07c7085bea636de3693ad20cf5d5
f8fbb702fcd7dbbe92fa0bc8027cef87a820541248a4b27437a6418220ae3e81
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1632.css?ver=1660664204 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:44 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2342
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8ff1c0d8a380ce4a561609526d995bf5
135ecd7e71ea2823d39f8c1efcb2121618ed8167
f7228281af8d6de222aa47b3a78a627f85315244e65a8956fa2c0c7dff1bb7ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1626.css?ver=1660664205
172.84.132.151200 OK 2.5 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1626.css?ver=1660664205
IP 172.84.132.151:0
File type ASCII text, with very long lines (44017), with no line terminators
Hash 2bce37a72575a2eb7022eb1d6f04ace8
ada9fc1d7ef6a683b8ef1a93d5e3b15bf30e737c
8008a7b6cb176e4e960c0ac217fe2801b1029154a7eda1d643fe8848803b3e6b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1626.css?ver=1660664205 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:45 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2526
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1622.css?ver=1660664205
172.84.132.151200 OK 1.9 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1622.css?ver=1660664205
IP 172.84.132.151:0
File type ASCII text, with very long lines (30480), with no line terminators
Hash be13067c8c2b07e36d287e983315cb9e
36b3f0f5e1d61fd8cb2e59f0c594065810a0c68f
77c258ebb89dcd22903a1c85389637d36251ed6d1c4b741bef8d5714ada2081f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1622.css?ver=1660664205 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:45 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1873
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1007.css?ver=1660664205
172.84.132.151200 OK 801 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-1007.css?ver=1660664205
IP 172.84.132.151:0
File type ASCII text, with very long lines (6596), with no line terminators
Hash d9e401b8e4d367c779c1b5d2f17f1456
d362be231b4b7bc11376b60b668c48dda2652ecd
442638184a6f440e470e6e0774680dedb95e658a47c79a2db76d0f82628daf3c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1007.css?ver=1660664205 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:45 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 801
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-886.css?ver=1660664206
172.84.132.151200 OK 590 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-886.css?ver=1660664206
IP 172.84.132.151:0
File type ASCII text, with very long lines (2205), with no line terminators
Hash 78f15961dfada2340d9f314473fd910e
e64cb40dc4be206214e3717176f6e2f0104edfcb
b4de40173331c63df9badf9132ae3ed9d79fb9545fd20c893a8d006f60b1e6e6
GET /wp-content/uploads/elementor/css/post-886.css?ver=1660664206 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 590
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-918.css?ver=1660664206
172.84.132.151200 OK 1.1 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-918.css?ver=1660664206
IP 172.84.132.151:0
File type ASCII text, with very long lines (13369), with no line terminators
Hash e73ffada90c2bccc19dfbebf9c2df11b
7c1b75730c42bbd62e13b178e8bf091df179c143
36742f906c75b1c3c4d24d0fe2107c6aa1baa8c8eb971033b4b38ad579743edb
GET /wp-content/uploads/elementor/css/post-918.css?ver=1660664206 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:04 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1108
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-881.css?ver=1660664206
172.84.132.151200 OK 661 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-881.css?ver=1660664206
IP 172.84.132.151:0
File type ASCII text, with very long lines (4537), with no line terminators
Hash 328c7886cb7bd631451a6820bc14e8eb
4b58bcdfb6880a4103a80b38242f507bf3617a2e
23b294f4c123ae226034442b8deb017c1a9c21909fa7edb1fbf7384ca9c7e101
GET /wp-content/uploads/elementor/css/post-881.css?ver=1660664206 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 661
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-873.css?ver=1660664206
172.84.132.151200 OK 679 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-873.css?ver=1660664206
IP 172.84.132.151:0
File type ASCII text, with very long lines (4533), with no line terminators
Hash 6a6ea14e8e0cbba92927154d1f673f18
55fe3b8fd193f5ce0778e8bcbc3e60531462aa28
e4039c8f4e55d621955fd08ab85b53a45c4b9fe3a916f6f669f703ba91e30618
GET /wp-content/uploads/elementor/css/post-873.css?ver=1660664206 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 679
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-325.css?ver=1660664206
172.84.132.151200 OK 1.4 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-325.css?ver=1660664206
IP 172.84.132.151:0
File type ASCII text, with very long lines (4377)
Hash 661938b2c381a17bbbd0b7444ec9ac60
385c9505c39c671e6ddba26f09c6d26646699462
d99479b96c76590526c6057696506bb99dc56af72a38b64e7b28db74d10fdb36
GET /wp-content/uploads/elementor/css/post-325.css?ver=1660664206 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:36:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1351
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3
172.84.132.151200 OK 13 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3
IP 172.84.132.151:0
Hash 481d609e7ec1ca9612c478d770396680
9243b4910389865e1fb344ff3fae8677d311157c
6c7da9b1e43313a09d09092c83095573dff3bde29c3276dca2472c3dc6a1fd02
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13085
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3
172.84.132.151200 OK 325 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3
IP 172.84.132.151:0
File type ASCII text, with very long lines (307)
Hash 6f597e04ea2c957ff6faa306ff60785f
f8c0a1279fcd3877bd6bfd78501edb08f5ac008a
f5c4cece11df8dadc96f31047b5d542466fe27d6b2744368c339dea29c26ae68
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 325
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.3.2
172.84.132.151200 OK 8.1 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.3.2
IP 172.84.132.151:0
Hash 6fa6ca4990039db79a3a33fdfbeb6373
73b8ab14564628ab44b16d28e6fcb49deada4e99
d56cdb01e69dbfc6f8f07b4930ab9494cf11cbf08f3ab9b81b44ea308ebc6c13
GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.3.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8116
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/twemoji.js?ver=e95333f7e53cc584892475bc3c55882f
172.84.132.151200 OK 8.2 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/twemoji.js?ver=e95333f7e53cc584892475bc3c55882f
IP 172.84.132.151:0
File type Unicode text, UTF-8 text, with very long lines (12979)
Hash 6e488b7ffb6d5d6f64ed0469d1d3045f
6f6619b6ba42f35d913d9a364d378fec39d33100
5e31025bb0d582464c7400ccc8556998849b4041263d5f4e62df77b9c31da1c5
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/twemoji.js?ver=e95333f7e53cc584892475bc3c55882f HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8227
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/wp-emoji.js?ver=e95333f7e53cc584892475bc3c55882f
172.84.132.151200 OK 3.4 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/wp-emoji.js?ver=e95333f7e53cc584892475bc3c55882f
IP 172.84.132.151:0
File type ASCII text, with very long lines (786)
Hash c2e30941f92359050964c0f30796dc20
bc6cdac0c613c89ba85760ced8fc7516f291c28d
d202e98a163373466a831419af7d57210a74c949309346c0630fa3a4dda03a9e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji.js?ver=e95333f7e53cc584892475bc3c55882f HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3441
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-163.css?ver=1660665611
172.84.132.151200 OK 388 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-163.css?ver=1660665611
IP 172.84.132.151:0
File type ASCII text, with very long lines (1476), with no line terminators
Hash 1a20a1392c1c62ad6d04c071f9441c82
0de62d3a4fd76a9dbdbab35b9da54291a4e04972
3d22a67f5f539ed213cb9944fb343b63176d9c30f165e7d7ab9050e014f1905f
GET /wp-content/uploads/elementor/css/post-163.css?ver=1660665611 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 16:00:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 388
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-201.css?ver=1660665611
172.84.132.151200 OK 387 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-201.css?ver=1660665611
IP 172.84.132.151:0
File type ASCII text, with very long lines (1476), with no line terminators
Hash 46c335f731ca453473f825f27b28a1e4
664b00fd912010760b5eebbaae2f402eedfe03fd
8a282d4bde8e783bcee424b243e3bb726cb7e9915604b393f4297ab3a7425308
GET /wp-content/uploads/elementor/css/post-201.css?ver=1660665611 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 16:00:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 387
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/elementor/css/post-205.css?ver=1660665611
172.84.132.151200 OK 388 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/elementor/css/post-205.css?ver=1660665611
IP 172.84.132.151:0
File type ASCII text, with very long lines (1476), with no line terminators
Hash c6ca485ab19022251f8754e76b81c0e3
c3eb7fcd51f53aa85afadc6901c4f522cf39e23e
52613ca971159eab809f078f59223029f0c5473073665c0734d9fde35e8aa1c6
GET /wp-content/uploads/elementor/css/post-205.css?ver=1660665611 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 16:00:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 388
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-includes/js/jquery/jquery.js?ver=3.6.0
172.84.132.151200 OK 85 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/jquery/jquery.js?ver=3.6.0
IP 172.84.132.151:0
Hash 458225b39ee21a8c4d9e628a68b72069
8d45de775fa2ebd9ad23d4aec2ff3b630dfbe5c8
aaa260e2f2397c4fb3c00d60b13ff8047593c4f7aa8d3dbd97364aa63b11ef3e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.js?ver=3.6.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.1
172.84.132.151200 OK 2.6 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.1
IP 172.84.132.151:0
File type ASCII text, with very long lines (10019)
Hash 0ea81c35141c6a4692506e4fe8d36edb
392c5f96995e66d74c27ed5a42f93169c2f32d18
b7488fd21ad73e483cdcaf42097ea7787ffe0616477e29a537f53f6064e321ab
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2592
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.js?ver=2.7.0-wc.6.7.0
172.84.132.151200 OK 6.6 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.js?ver=2.7.0-wc.6.7.0
IP 172.84.132.151:0
Hash fb9510cbb8b61c161e0a32ca21bdfc72
e7222195b09db99d9fdaf3ceb83629c6066a3cc7
40e7de9d267778b6f27cd51ee57fb8bdf884272d6d5854f258534028e5c9843b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.js?ver=2.7.0-wc.6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6621
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.js?ver=6.7.0
172.84.132.151200 OK 1.7 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.js?ver=6.7.0
IP 172.84.132.151:0
Hash e6a2c7bd668b1c209b8989173d85e45b
67099bae83dc4f21ee6cd6dd4c020a6ed7b184ad
3b8ce0f69e370fb60f7ecd6f534805a84d1265054669cbbee9fb0d2e24035534
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.js?ver=6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1721
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.js?ver=2.1.4-wc.6.7.0
172.84.132.151200 OK 1.5 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.js?ver=2.1.4-wc.6.7.0
IP 172.84.132.151:0
Hash 381af23339981629e50bfc6062058ac3
6183b0294adca41eb2846efe0f65692324fa9fc8
d264adcba088fa343ebcfe02edd5e605dbae7b9c03eaa36c61ea7d849c3a84f5
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.js?ver=2.1.4-wc.6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1475
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.js?ver=6.7.0
172.84.132.151200 OK 1.2 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.js?ver=6.7.0
IP 172.84.132.151:0
Hash 22ee6709e8195b6498ff0d6ca6166492
bf47071b6704453a64915bc460a2eb995aaa58b3
2b9c16c38a629fbb9eb4a2105e22fa1868909f26afb14b5764b5733a239f6643
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.js?ver=6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1177
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.js?ver=6.7.0
172.84.132.151200 OK 1.6 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.js?ver=6.7.0
IP 172.84.132.151:0
Hash 75d5fd720bdc431ce13de4bf6a34177c
c24d3b2cd89e486cd2611e3478d12dd6d3527b12
b8ae4f2f5da9902441cbf5203b2ae0c324d74f267245c041a4018706c4429720
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.js?ver=6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1604
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.js?ver=1.0.1
172.84.132.151200 OK 12 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.js?ver=1.0.1
IP 172.84.132.151:0
Hash f55ad38510d58ec6ea9dfcbe5c8339bd
a55bdfac5451b8846be380a181943e9d008251b0
591249ff718943f82395c05675cf8166de5dc399c7a27bfae6be2aa414b17922
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.js?ver=1.0.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11599
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
172.84.132.151200 OK 1.8 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP 172.84.132.151:0
File type ASCII text, with very long lines (5477)
Hash 951ae46ca55ec7b0e401e2074bdf8b54
64bbbdc28a351b26cab9c230e134ca8eb4d4f83e
fd5d4c623e9d68551114b2a1303584b6792e592e864d4416145904fe8b9edd91
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1834
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js?ver=3.7.2
172.84.132.151200 OK 3.9 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js?ver=3.7.2
IP 172.84.132.151:0
Hash a16ec15b39de4d471d319fb3a5229d12
4bf3d435150483772c869598f4fabb06a31c08c7
b39e65cba4f34d34ece56e1f4f2cbc4688dac91de51de91f8d60612a966dd224
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js?ver=3.7.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3904
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.7.1
172.84.132.151200 OK 4.0 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.7.1
IP 172.84.132.151:0
Hash 0b72fbda760184783ef1573c16d0eedc
89734f480514661a054ccb5a4d6a4bcb2e01337d
ef4b123a128cb0a49956444d337450071e54bebc17610a8a00a1888fba0e089c
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4013
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.7.1
172.84.132.151200 OK 22 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.7.1
IP 172.84.132.151:0
Hash 337be25fad878b08b15611d3d4c620ee
34c7a3ccebed0cdf4b7e1f96cc0af8f30b77b390
6b78150efd865795ffa683924bbfb2bd939c14eb6d82e91d09aa706511b56190
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 22518
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/woocommerce-paypal-payments/modules/ppcp-button/assets/js/button.js?ver=1.9.1
172.84.132.151200 OK 51 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce-paypal-payments/modules/ppcp-button/assets/js/button.js?ver=1.9.1
IP 172.84.132.151:0
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 80ad9cabb879eeb5965089fa53950bb2
fdd816274173d579fd4ca046ba06e422263c871c
15fc4b945219eb7c28dc377d9bb238c3d4cacbb0cf393b14aa6146173accd26b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce-paypal-payments/modules/ppcp-button/assets/js/button.js?ver=1.9.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:21 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 50811
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/dist/vendor/regenerator-runtime.js?ver=0.13.9
172.84.132.151200 OK 7.1 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/dist/vendor/regenerator-runtime.js?ver=0.13.9
IP 172.84.132.151:0
Hash b10712eadc2afb5cc56aadcf5a99bb67
9c41ab5306e0ee35a1a3b9e93620a435fe8b3471
472c9e23c35890a7bb95fea830c08dcd6a1e92c804307a53526a369100dc8104
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.js?ver=0.13.9 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7111
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mesquitefloors.com/wp-includes/js/dist/vendor/wp-polyfill.js?ver=3.15.0
172.84.132.151200 OK 15 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/dist/vendor/wp-polyfill.js?ver=3.15.0
IP 172.84.132.151:0
Hash ee936334726b39f1b19fc9b01cd16c4a
288cac04b6476b3cdee6b1d093a5ccaf22676538
efade08ae481f32ba59b1e8704ce23c3e4d41aeed96645e96e32a737728e3b53
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/wp-polyfill.js?ver=3.15.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14637
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/dist/hooks.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
172.84.132.151200 OK 4.5 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/dist/hooks.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP 172.84.132.151:0
Hash 089aa65313fa0969b4618908e9b5b296
92e142a9c541df25b28c0feacc403874833770dd
e85f3ee93996ff55e51677f7f1b075799b784b10daafa2b737e92fe94a755523
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/hooks.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4486
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/dist/i18n.js?ver=ebee46757c6a411e38fd079a7ac71d94
172.84.132.151200 OK 12 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/dist/i18n.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP 172.84.132.151:0
Hash bd68da135eecad8605fc44b3d570d4d0
144516dab8002b737ee8b248145ccacb442ef63c
65479acf4c920d4249f9b85a8da4a2664e18ee5dec728b30182306a4be5b0b1c
GET /wp-includes/js/dist/i18n.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12161
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
142.250.74.163200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 21:13:12 GMT
expires: Tue, 12 Sep 2023 21:13:12 GMT
cache-control: public, max-age=31536000
age: 260874
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourceserifpro/v15/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSyqxA.woff2
142.250.74.163200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/sourceserifpro/v15/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSyqxA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 20884, version 1.0\012- data
Hash 6f83b212799af717170a27228aa65771
68ff4fa008f3d06bdb2950ad19d7020abf12c479
d42a2e1e2995c1b5d0716ac0c6f2eef70ad416c8993b87b95954e15a3c77b26a
GET /s/sourceserifpro/v15/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSyqxA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 23:41:02 GMT
expires: Thu, 14 Sep 2023 23:41:02 GMT
cache-control: public, max-age=31536000
age: 79204
last-modified: Wed, 27 Apr 2022 15:27:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2
142.250.74.163200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 20960, version 1.0\012- data
Hash d312d179276a175029c56c50e9bc9d0b
aa9285dd6183c696fc39ec31c221581e2d4959c1
7c0597b1b0c771139c958982210f05b275993037f0f3ba20d7a9300a0741dc80
GET /s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 00:05:44 GMT
expires: Thu, 14 Sep 2023 00:05:44 GMT
cache-control: public, max-age=31536000
age: 164122
last-modified: Tue, 19 Apr 2022 19:18:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/js/frontend.js?ver=3.7.2
172.84.132.151200 OK 8.5 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/js/frontend.js?ver=3.7.2
IP 172.84.132.151:0
File type ASCII text, with very long lines (322)
Hash 5c9dc71af6c886255f84b25ebb73136f
0985a6cf6373646905adbceaaef5798fa791ff67
894d5a25c8c75ad0f5d310d5471aa1553e9d25880640cca15d142e42ee754062
GET /wp-content/plugins/elementor-pro/assets/js/frontend.js?ver=3.7.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8532
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 94018
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2
172.84.132.151200 OK 3.7 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2
IP 172.84.132.151:0
Hash de4e87a8079291e0fe48828757a5d837
46a37374a310523a785be95d531e3b4100310ee9
3418c8376a473d6efca0df42f131208f92602fd898ea4426c77fc27028bc2205
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3684
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-includes/js/jquery/ui/core.js?ver=1.13.1
172.84.132.151200 OK 13 kB URL HTTP/1.1 www.mesquitefloors.com/wp-includes/js/jquery/ui/core.js?ver=1.13.1
IP 172.84.132.151:0
Hash 1681cbc19fb48f14ea5959b0625e6822
bc7a920c7726d136861a4732034d8d2dc0afd769
c2c8cce5d862dee04a476d1fe03fb5fec76675c83ba551e2399862f006f2ee4c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/core.js?ver=1.13.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13245
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.js?ver=3.7.1
172.84.132.151200 OK 1.6 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.js?ver=3.7.1
IP 172.84.132.151:0
Hash 22e819d2bf1736d75ae73b11b5b62229
6ae0461a62af7529f05ad5c74bff9a5ed1d7198e
f1d1dedfd151452c3bb0f03be5adfe79dc01ca9716e563ef210159d64e1c9de6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.js?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1572
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 94018
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
142.250.74.163200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 21144, version 1.0\012- data
Hash 2bc7630144496092dc786ce63109e560
723df3658078cfed03c85e47f15fc439eb4331be
7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e
GET /s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 22:36:55 GMT
expires: Wed, 13 Sep 2023 22:36:55 GMT
cache-control: public, max-age=31536000
age: 169451
last-modified: Tue, 19 Apr 2022 19:43:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.js?ver=5.3.6
172.84.132.151200 OK 54 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.js?ver=5.3.6
IP 172.84.132.151:0
Hash 54bb79c6b51b4e375428d3da567ce474
ecdadf884f7cd3a5555d15d5ec420df679d38567
f3b9266f6f0725cd429f31ee223419a7a059b5310c4b8c438c9209de341eda70
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.js?ver=5.3.6 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 54094
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.js?ver=4.9.0
172.84.132.151200 OK 4.8 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.js?ver=4.9.0
IP 172.84.132.151:0
Hash 45ba53746b0cb9bd35729c01cc0a0192
83889721dd688846150e63e97f35b456926f2812
60c8bb2e9dbf93d0cab332f8f58f57516c50df95a9038d941efe959178e1530f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.js?ver=4.9.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4813
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/frontend.js?ver=3.7.1
172.84.132.151200 OK 22 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/frontend.js?ver=3.7.1
IP 172.84.132.151:0
File type ASCII text, with very long lines (428)
Hash 1e4b7af0d13bfa1d545eb3607a7c821b
0052d5232e74b444cfdb80ca733f3e8d61be918a
2a992873fe1cffd1989bae4ee21bd40550f1368d06e1a31936b3051e5cac0b97
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend.js?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21879
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/preloaded-modules.js?ver=3.7.1
172.84.132.151200 OK 18 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/js/preloaded-modules.js?ver=3.7.1
IP 172.84.132.151:0
File type ASCII text, with very long lines (759)
Hash 1680df5eba4b32edb5f9006bb2260f3c
f157e51ba4d8b651b561abcf02d4fee22fa3425e
89e7efaf4b515680088a21c2fd1aa51cf2b1e8ce871c7440b9c4fa26792460cf
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.js?ver=3.7.1 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18082
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js?ver=3.7.2
172.84.132.151200 OK 2.2 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js?ver=3.7.2
IP 172.84.132.151:0
Hash 55a5da30f8f595af27d869c74fdc2319
eaf0c266b870d95ef388eb7f968837add19268fe
ca6758dd0e8bf1f148cce1d517f9c560a9f6b03b7e88037b1ace7da143d8c865
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js?ver=3.7.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2177
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.js?ver=3.7.2
172.84.132.151200 OK 48 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.js?ver=3.7.2
IP 172.84.132.151:0
File type C++ source, ASCII text, with very long lines (376)
Hash 0f0720ddfaf71d793f9c431830ce2f55
497fde03aa91aaec24acec864981c981a76c13ca
ab31770e13f8ef27c45e65bd79c385e4478f572d4aef034857f680d974198ea8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.js?ver=3.7.2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 48042
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.7.0
172.84.132.151200 OK 1.2 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.7.0
IP 172.84.132.151:0
File type ASCII text, with very long lines (7043), with no line terminators
Hash 7a01d757cd8aced5af866e83a6d0ce76
f352b0e25c2a3ca7af84f93c9bc1fd700db3586f
da5327f259e09fafac875160fbcd3fe934f48359e751e42b802f5577310b014c
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.7.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:32:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1177
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/css
www.mesquitefloors.com/wp-content/uploads/2022/05/mantel.jpeg
172.84.132.151200 OK 31 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/05/mantel.jpeg
IP 172.84.132.151:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 800x254, components 3\012- data
Hash 2c05f8aba34645ace5e0ce5b7d4d1961
1adc835eddbaae37cacada05017a3458fd066541
50c1c62efec9dfcad34a01e1a95894fb202941c9b4d18408fc2ce7a5b0f795a4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/05/mantel.jpeg HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/wp-content/uploads/elementor/css/post-41.css?ver=1660665610
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Content-Length: 31354
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
www.mesquitefloors.com/wp-content/uploads/2022/04/logo-1.png
172.84.132.151200 OK 3.3 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/04/logo-1.png
IP 172.84.132.151:0
File type PNG image data, 335 x 81, 8-bit colormap, non-interlaced\012- data
Hash 178de10e56dfbb33853be7aca35bbbf7
3aaf55b50c9324d9f7e234a9226b871734a614f7
463d49775e48727d35db6e7a1695cd9ef2410d37631e81c4c22b8bdb75e4f277
GET /wp-content/uploads/2022/04/logo-1.png HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Content-Length: 3280
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
www.mesquitefloors.com/wp-content/uploads/2022/04/HeroImage.png
172.84.132.151200 OK 169 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/04/HeroImage.png
IP 172.84.132.151:0
File type PNG image data, 650 x 570, 8-bit colormap, non-interlaced\012- data
Size 169 kB (168898 bytes)
Hash 9859570f085575b23958639912ed1957
72c52c71ada1a878a16126103c4825557dbd1d85
3e13b43afdd5d3080de958e812dbe23f271d01f295a58e94758a5de730b2c9a3
GET /wp-content/uploads/2022/04/HeroImage.png HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Content-Length: 168898
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
172.84.132.151200 OK 78 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP 172.84.132.151:0
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Content-Length: 78196
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: font/woff2
www.mesquitefloors.com/wp-content/uploads/2022/08/pic6.png
172.84.132.151200 OK 194 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/08/pic6.png
IP 172.84.132.151:0
File type PNG image data, 330 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 194 kB (193490 bytes)
Hash a98d32989d7b2c94a6b9104b48585704
9da790a82af9c5798bfd553f9767258e53fa4379
1b4ecbf20782dc5508e5a641221b0a7090382501c30c5ca129b7e3cb4394b2cc
GET /wp-content/uploads/2022/08/pic6.png HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/wp-content/uploads/elementor/css/post-41.css?ver=1660665610
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 14:40:41 GMT
Accept-Ranges: bytes
Content-Length: 193490
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:05 GMT
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5a0890f76de28b917f5f437d663e6fa9
4eb47d1b9b8dce30048faa2200bcbcd5ee5317c3
99fbdd65a167b2fd9e82af4898db202e5edb109a7a36b33414660390c7f9aa65
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2702
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:07 GMT
Last-Modified: Thu, 15 Sep 2022 20:56:05 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.mesquitefloors.com/wp-content/uploads/2022/04/Group-1-1.png
172.84.132.151200 OK 124 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/04/Group-1-1.png
IP 172.84.132.151:0
File type PNG image data, 650 x 555, 8-bit colormap, non-interlaced\012- data
Size 124 kB (123828 bytes)
Hash 3f365c8cea262efbf04e9463f4056242
4fe0c91cec4293872e179dbfee1974f022f82a15
bbb92a60e3cff356211736a7f0f2565abb60fd5aeafb332961e1c4b0003a9f4f
GET /wp-content/uploads/2022/04/Group-1-1.png HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Content-Length: 123828
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/background-4.40.12-p.m..png
71.40.14.245200 OK 24 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/background-4.40.12-p.m..png
IP 71.40.14.245:0
File type PNG image data, 1440 x 700, 1-bit colormap, non-interlaced\012- data
Hash eb2edd13d312cd928913bba428628c5a
b30d9e6c0d56a6a5105b39b6bb7dfec62e560064
7b1ed5a503d79281de63a231685e22aa191f721b9f9c28c2eeb0baf4de9fdd92
GET /wp-content/uploads/2022/04/background-4.40.12-p.m..png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:54:24 GMT
Accept-Ranges: bytes
Content-Length: 24188
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic1.png
71.40.14.245200 OK 38 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic1.png
IP 71.40.14.245:0
File type PNG image data, 330 x 300, 8-bit colormap, non-interlaced\012- data
Hash ad931d601f8f4baa12091ab7800ddce4
19cc22e9dea5d1a3b99e78d05852fe34c169fe52
5e0760fc886d1370027a64062ea6a57e70ae69e0f271bd31e0e495f4e15d4dd8
GET /wp-content/uploads/2022/04/pic1.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:52:52 GMT
Accept-Ranges: bytes
Content-Length: 38086
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic5.png
71.40.14.245200 OK 22 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic5.png
IP 71.40.14.245:0
File type PNG image data, 330 x 300, 4-bit colormap, non-interlaced\012- data
Hash 17dffd5b3c352e5914ab176cedb5705a
5fed9c0d64159c6ca834b4bf427ac110be59190a
f842f3c1a05d9721327af00f7ceef3ddfc93f783534aff01eca416f8d1aa8663
GET /wp-content/uploads/2022/04/pic5.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:52:06 GMT
Accept-Ranges: bytes
Content-Length: 21876
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/BG.png
71.40.14.245200 OK 86 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/BG.png
IP 71.40.14.245:0
File type PNG image data, 1440 x 900, 1-bit colormap, non-interlaced\012- data
Hash 8db40566870c47b02dd94af4d2bbe442
efd1ab4563b657d932be6c7f6539eae62dc977b4
fe3e6b6d03d7177a44b0debdf9e91d3751bf30e77c47e86170a0fc5d75f64ab9
GET /wp-content/uploads/2022/04/BG.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:53:03 GMT
Accept-Ranges: bytes
Content-Length: 86025
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic2.png
71.40.14.245200 OK 60 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic2.png
IP 71.40.14.245:0
File type PNG image data, 330 x 300, 8-bit colormap, non-interlaced\012- data
Hash 1e14d5ed220096064ca2ef340fadf85e
34a0103e437e2ff65fde2fa1ef73317588c68f5a
5e0d3fc3ba0bce372090ac8bbc2bd3c7fdc1e8be37dd7fbb09b2034575cf645d
GET /wp-content/uploads/2022/04/pic2.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:52:30 GMT
Accept-Ranges: bytes
Content-Length: 59808
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/05/slab.jpeg
71.40.14.245200 OK 75 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/05/slab.jpeg
IP 71.40.14.245:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 800x407, components 3\012- data
Hash 195c1037033e777a681be875d7c5919f
043ae404ec7f2d9f516705d5a2476a2a045f5ed5
009b36411e182ba8531e78680effe193e067f17a545d83f6916ae3c238b2c7c5
GET /wp-content/uploads/2022/05/slab.jpeg HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Mon, 09 May 2022 21:30:27 GMT
Accept-Ranges: bytes
Content-Length: 74821
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.mesquitefloors.com/wp-content/uploads/2018/08/final62-201x300.jpeg
172.84.132.151200 OK 19 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2018/08/final62-201x300.jpeg
IP 172.84.132.151:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 201x300, components 3\012- data
Hash 7afeba597252a292ff1959964ab5579a
68016bd8a9b88fed97f66305de1482773dd8160a
b734be5b547b147d158e8e952eaf3bbbbf883eff121a37739a7b8339f17e5b0c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2018/08/final62-201x300.jpeg HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:14 GMT
Accept-Ranges: bytes
Content-Length: 19014
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
www.mesquitefloors.com/wp-content/uploads/2018/07/Botanical-wood-slices-7-300x200.jpeg
172.84.132.151200 OK 14 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2018/07/Botanical-wood-slices-7-300x200.jpeg
IP 172.84.132.151:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x200, components 3\012- data
Hash 9fa212a37a8929d831e8731c7419640d
d14d5d16c50c17ab358a94aecc6d1b01e99e0696
58fd7c7af98559d16064484d726384322aa9b7ddfa35b8fcb3eaee21ff503b93
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2018/07/Botanical-wood-slices-7-300x200.jpeg HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:14 GMT
Accept-Ranges: bytes
Content-Length: 13799
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
www.mesquitefloors.com/wp-content/uploads/2018/06/birchbranchplacematcbforehow2-200x300.jpeg
172.84.132.151200 OK 13 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2018/06/birchbranchplacematcbforehow2-200x300.jpeg
IP 172.84.132.151:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 200x300, components 3\012- data
Hash a2eab8f04d45fb6bcb7ab015ee0a6cb8
59ad3e5c7391c9891a9beafdfa072aebcda61bb2
b197eb517b7f88c260b6cd17ccfc6e755312d78989f2ec8444939f0a4d8c8972
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2018/06/birchbranchplacematcbforehow2-200x300.jpeg HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:14 GMT
Accept-Ranges: bytes
Content-Length: 12590
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:06 GMT
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/jpeg
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic2-1.png
71.40.14.245200 OK 79 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic2-1.png
IP 71.40.14.245:0
File type PNG image data, 510 x 300, 8-bit colormap, non-interlaced\012- data
Hash 8fd1a0446810f21eff0c14a65c7325e9
573e838e9cb504f38da7ce7933e4b37329cc088f
287bc44eb7120afddcc68f6f6a01ceb3472769e6a96170073573ee676a3c8830
GET /wp-content/uploads/2022/04/pic2-1.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:51:26 GMT
Accept-Ranges: bytes
Content-Length: 79102
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic1-1.png
71.40.14.245200 OK 76 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic1-1.png
IP 71.40.14.245:0
File type PNG image data, 510 x 300, 8-bit colormap, non-interlaced\012- data
Hash f22d5858cef6db944f5b0aeb3900e6f2
cee296505142e5ed9496d317b88b6e8192d39530
150d35441a38f31101feb86e438e0457fc219236ae154bd21feb74827019da79
GET /wp-content/uploads/2022/04/pic1-1.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:51:38 GMT
Accept-Ranges: bytes
Content-Length: 75633
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic2-2.png
71.40.14.245200 OK 72 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic2-2.png
IP 71.40.14.245:0
File type PNG image data, 280 x 430, 8-bit colormap, non-interlaced\012- data
Hash 4a4f337a1fd86b18214d3f4dbfc50079
8dc8a5e974f13eb3e56479e2734269c2d0e35633
426a3996266f92f2e8c8cc8fa1bc1fd966591adb0cf51dd6dc06e6e88ffca9da
GET /wp-content/uploads/2022/04/pic2-2.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:49:57 GMT
Accept-Ranges: bytes
Content-Length: 71575
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/bar.png
71.40.14.245200 OK 193 B URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/bar.png
IP 71.40.14.245:0
File type PNG image data, 1440 x 200, 1-bit colormap, non-interlaced\012- data
Hash f1b67243d863c86bfcb0b8f8daa20500
52fb34cc9a976d400072821896eb8ab900c5f2ca
6efba51069eaf0e7a857c8b18f356175eecbda3578bcaf1a3562a721f76092e4
GET /wp-content/uploads/2022/04/bar.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Thu, 28 Apr 2022 21:01:14 GMT
Accept-Ranges: bytes
Content-Length: 193
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic1-2.png
71.40.14.245200 OK 75 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic1-2.png
IP 71.40.14.245:0
File type PNG image data, 280 x 430, 8-bit colormap, non-interlaced\012- data
Hash b0c6a89ad7fa095768d56dc89ca28c64
0228f0d68a9537f71c22fe4e3e92333befd5e8f5
45d1cb8ea8b1b385268e6a48427bd4eba94d8e07a3680783f3e473d2f81c318e
GET /wp-content/uploads/2022/04/pic1-2.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:50:14 GMT
Accept-Ranges: bytes
Content-Length: 74878
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/BG-1.png
71.40.14.245200 OK 67 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/BG-1.png
IP 71.40.14.245:0
File type PNG image data, 1440 x 700, 1-bit colormap, non-interlaced\012- data
Hash a48550531e8ac508e641b12089187e35
a2fd1f7ce45dd1c3c1568c93cd583c0c4f21c0d2
c10081c42482fe198a2eeeb2413a1d1dd4a85fefec12b507d1a7500c5a850718
GET /wp-content/uploads/2022/04/BG-1.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:49:03 GMT
Accept-Ranges: bytes
Content-Length: 66953
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic3-1.png
71.40.14.245200 OK 76 kB URL HTTP/1.1 mesquitefloors.vnddev.com/wp-content/uploads/2022/04/pic3-1.png
IP 71.40.14.245:0
File type PNG image data, 280 x 430, 8-bit colormap, non-interlaced\012- data
Hash 747dbf3d8d66f5b7550d1ff410792386
8b8af64ee0333d9c62fcbdf484383cde47b77e9b
c55b73663db2c5eed6ca389feb89d4e9e6f2d76f98ec1d14422ab24186926b03
GET /wp-content/uploads/2022/04/pic3-1.png HTTP/1.1
Host: mesquitefloors.vnddev.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 22:49:45 GMT
Accept-Ranges: bytes
Content-Length: 75574
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js
142.250.74.163200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (581)
Size 158 kB (157726 bytes)
Hash 6519c7c04cf32a57b1c5ee45a73c233e
4939bb921988e9eb13780cc2244f3099776e9bfb
8352dd4e3e0fe82562cdc280c020fc31d2c6d054f7ead441a3b18de8ef04401b
GET /recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:37:29 GMT
expires: Thu, 14 Sep 2023 05:37:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 00:24:01 GMT
content-type: text/javascript
age: 144219
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1961)
Hash 7203267d0601dfbd7fae668c9dcbfa17
a96cb56e8efcd2e063e08e8bd3d66007d8c36450
8ae4d581869c8084b02b1a15c46d534133bf17cb05b813fa87f622696c397fc8
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 3b844d736895de37600ed5652a159946
etag: "8d740c4cf5e206c98e4491f0f8ae448f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 15 Sep 2022 21:56:33 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: cgMmfQYB371/rmaMncv6Fw==
x-fb-debug: 8Ji1pjBQ/QCyhI5r3xqD3xRdP5XPe8q3ES9wRcRM8LpAmfOsDXXIq11/QJJYVFj332lyFbMs2+JEWpeufP1U2g==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 21:41:08 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Thu, 15 Sep 2022 20:41:12 GMT
expires: Thu, 15 Sep 2022 22:41:12 GMT
cache-control: public, max-age=7200
age: 3596
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7dff4bc87dbee6fd33e0d7a3dc5ed3bd
59878d4dd98e60b39dcf7ac288e77bb262afab5d
8c3a027cee1f48144eb0504deff1f2b9aa98c9fc3f4e3057ece6caac9f604315
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2654
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:08 GMT
Last-Modified: Thu, 15 Sep 2022 20:56:54 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mesquitefloors.com/wp-content/uploads/2022/05/cropped-Frame-32x32.png
172.84.132.151200 OK 1.4 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/05/cropped-Frame-32x32.png
IP 172.84.132.151:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5a9247bb3d2a3d4b4be6cc99d0930fd3
305d2bba089d28c9eb366204700aee5f3544a8ea
0e3e1d71a1bd4be8f0531d92458e791883b050af0457a6653d9bd28b36ac0d0e
GET /wp-content/uploads/2022/05/cropped-Frame-32x32.png HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Content-Length: 1385
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
www.mesquitefloors.com/wp-content/uploads/2022/05/cropped-Frame-192x192.png
172.84.132.151200 OK 12 kB URL HTTP/1.1 www.mesquitefloors.com/wp-content/uploads/2022/05/cropped-Frame-192x192.png
IP 172.84.132.151:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash ecf3b5a60ac4e221b8694725db8236f3
fa8e29ee5333b3cd9f341e7fc39ea8052e987924
1b89d4c29121235e46ca1fb8062c1ac7c4631f99aad116bb9ce688925defcac7
GET /wp-content/uploads/2022/05/cropped-Frame-192x192.png HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:07 GMT
Server: Apache
Last-Modified: Tue, 02 Aug 2022 11:52:15 GMT
Accept-Ranges: bytes
Content-Length: 12169
Cache-Control: max-age=31536000
Expires: Fri, 15 Sep 2023 21:41:07 GMT
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
www.paypal.com/sdk/js?client-id=Acx6x3KOY7Y4A0D-xP808BBe5s8uacnVRpNN6BfGkEbLA_GEuhK2LIRS3eHKokJmErXKTWVcW_tbEWQz¤cy=USD&integration-date=2022-04-13&components=buttons,messages&vault=false&commit=false&intent=capture&disable-funding=sepa,bancontact,blik,eps,giropay,ideal,mercadopago,mybank,p24,sofort,venmo,card&enable-funding=venmo,paylater
151.101.193.21200 OK 124 kB URL HTTP/2 www.paypal.com/sdk/js?client-id=Acx6x3KOY7Y4A0D-xP808BBe5s8uacnVRpNN6BfGkEbLA_GEuhK2LIRS3eHKokJmErXKTWVcW_tbEWQz¤cy=USD&integration-date=2022-04-13&components=buttons,messages&vault=false&commit=false&intent=capture&disable-funding=sepa,bancontact,blik,eps,giropay,ideal,mercadopago,mybank,p24,sofort,venmo,card&enable-funding=venmo,paylater
IP 151.101.193.21:0
File type Unicode text, UTF-8 text, with very long lines (65471)
Size 124 kB (124013 bytes)
Hash 24d2f1fa3c997688e591b463d960b4e7
c573b2ab8cc75010904485b47e30ff7dab7e189f
fb4fe5c5aaa0accc077186a3062a447a650e74eb8c2d735813bdbb62e1d8f516
GET /sdk/js?client-id=Acx6x3KOY7Y4A0D-xP808BBe5s8uacnVRpNN6BfGkEbLA_GEuhK2LIRS3eHKokJmErXKTWVcW_tbEWQz¤cy=USD&integration-date=2022-04-13&components=buttons,messages&vault=false&commit=false&intent=capture&disable-funding=sepa,bancontact,blik,eps,giropay,ideal,mercadopago,mybank,p24,sofort,venmo,card&enable-funding=venmo,paylater HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-oJTJEzaiifQS1PhabeXfBZ5yUCLjbxRIv5m92/a7+V9Uk73A' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-oJTJEzaiifQS1PhabeXfBZ5yUCLjbxRIv5m92/a7+V9Uk73A' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"1e46d-xXOyq4zHUBCQRIW0fjD/fat+GJ8"
p3p: true
paypal-debug-id: f1904486ce9a0
traceparent: 00-0000000000000000000f1904486ce9a0-ce98e308a9acab2f-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Sep 2022 21:41:08 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11560-HHN, cache-bma1667-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1663278067.356696,VS0,VE1015
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f1904486ce9a0-8e9ec09a9c8105a6-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 124013
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.mesquitefloors.com&t=xo&v=5.0.332&source=payments_sdk&client_id=Acx6x3KOY7Y4A0D-xP808BBe5s8uacnVRpNN6BfGkEbLA_GEuhK2LIRS3eHKokJmErXKTWVcW_tbEWQz&comp=buttons,messages&vault=false
151.101.193.21200 OK 4.8 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.mesquitefloors.com&t=xo&v=5.0.332&source=payments_sdk&client_id=Acx6x3KOY7Y4A0D-xP808BBe5s8uacnVRpNN6BfGkEbLA_GEuhK2LIRS3eHKokJmErXKTWVcW_tbEWQz&comp=buttons,messages&vault=false
IP 151.101.193.21:0
File type ASCII text, with very long lines (13626)
Hash 70a6791a3d341f234cff9f2941b10052
3577ea9da8f11c7af8fff15f6ca0e59dc1704a24
132782b6570acbc4da9442733923b24fc6d251de08833f568750819f71254451
GET /tagmanager/pptm.js?id=www.mesquitefloors.com&t=xo&v=5.0.332&source=payments_sdk&client_id=Acx6x3KOY7Y4A0D-xP808BBe5s8uacnVRpNN6BfGkEbLA_GEuhK2LIRS3eHKokJmErXKTWVcW_tbEWQz&comp=buttons,messages&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-NL4lFFnre/1+kM2hyjLTq/zQ6l3exwp96b/Q9O0FTAc3t5+y' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"3565-pO7Sy2awMzIv/7I3ww/BOCDa3GE"
paypal-debug-id: f35583453af1f
traceparent: 00-0000000000000000000f35583453af1f-58a0e2216f93f1a0-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Sep 2022 21:41:08 GMT
age: 17291
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4054-HHN, cache-bma1667-BMA
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-timer: S1663278069.508891,VS0,VE30
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f35583453af1f-e05b37da774b3ecd-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4768
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=11c75343c7cf92b157f5c17a81f017ef
31.13.72.12200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=11c75343c7cf92b157f5c17a81f017ef
IP 31.13.72.12:0
File type ASCII text, with very long lines (18570)
Hash 8d3bc7eaebeb66014f0298ab31e1b880
d4b8ddedd54a7215d716f675b39740dc5a5057d2
2740a3d8c9af2a4803214e294e51e1bdd722335450136e6f87c623aeb40548c2
GET /en_US/sdk.js?hash=11c75343c7cf92b157f5c17a81f017ef HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 6f93371557287f17dc5751aff106712f
etag: "e87ab85804586ff67a1cd6953add4619"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 15 Sep 2023 21:02:36 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: jTvH6uvrZgFPApirMeG4gA==
x-fb-debug: mnNhQ9vB6j0JZngNqYXCCf/QEdu9K8AJbnr3or6Fjr/CWQItKCsHjEoi9CCcUE1CQeTKUQmVi7XM+ziCD4eOGA==
priority: u=3,i
content-length: 88471
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:08 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.paypalobjects.com/muse/muse.js
151.101.86.133200 OK 16 kB URL HTTP/2 www.paypalobjects.com/muse/muse.js
IP 151.101.86.133:0
File type ASCII text, with very long lines (55891)
Hash 6aebbe482c72000aea20895991f70478
eff1d3370786f9ee4ea539776bc43ab9bece89ba
2acb950bc7678b9e6c265194821fac386bf555db582ee8c0e2d9e68ff3eaa862
GET /muse/muse.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: application/javascript
etag: W/"6271663d-da91"
last-modified: Tue, 03 May 2022 17:28:29 GMT
paypal-debug-id: 84840867de170
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Sep 2022 21:41:08 GMT
x-served-by: cache-sjc10029-SJC, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 5220
x-timer: S1663278069.651504,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 16464
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/styles__ltr.css
142.250.74.163200 OK 24 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/styles__ltr.css
IP 142.250.74.163:0
File type ASCII text, with very long lines (52762), with no line terminators
Hash f2d649025c814be9c33f166a5e04fe88
26bf59de631415927ba2c6c9e44fe9c763f95313
f95ec963b7657097e1ef827fc07d96eda5b63f7d3e17b5a1b5eeb7a8d0b67921
GET /recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24251
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:19:12 GMT
expires: Thu, 14 Sep 2023 05:19:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 00:24:01 GMT
content-type: text/css
age: 145316
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.paypalobjects.com/muse/analytics/index.html
151.101.86.133200 OK 17 kB URL HTTP/2 www.paypalobjects.com/muse/analytics/index.html
IP 151.101.86.133:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55410)
Hash 56fc10c2e8100a7e4418dc987c23d7a5
5c11880437f36368f82da60522bfcb0d57b395cf
326df6156907ef357f13bf48a5a3798dd4e692345d04fb4edad8370058d1198a
GET /muse/analytics/index.html HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: text/html
etag: W/"6271663d-d994"
last-modified: Tue, 03 May 2022 17:28:29 GMT
paypal-debug-id: 50b39f10d2761
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Sep 2022 21:41:08 GMT
x-served-by: cache-sjc10077-SJC, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 5539
x-timer: S1663278069.700403,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 16791
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3AHS9VFZWD6MDKS-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3AHS9VFZWD6MDKS-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&fltp=analytics&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1663278053093&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F
192.229.221.25200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3AHS9VFZWD6MDKS-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3AHS9VFZWD6MDKS-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&fltp=analytics&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1663278053093&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3AHS9VFZWD6MDKS-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3AHS9VFZWD6MDKS-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&fltp=analytics&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1663278053093&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 15 Sep 2022 21:41:08 GMT
expires: Thu, 15 Sep 2022 21:41:08 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 921218fd85937
pragma: no-cache
server: ECAcc (frb/6714)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=189
set-cookie: ts=vreXpYrS%3D1757972468%26vteXpYrS%3D1663279868%26vr%3D431934071830a461f793c9c3ffffffff%26vt%3D431934071830a461f793c9c3fffffffe; Expires=Mon, 15 Sep 2025 21:41:08 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D431934071830a461f793c9c3ffffffff%26vt%3D431934071830a461f793c9c3fffffffe; Expires=Mon, 15 Sep 2025 21:41:08 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000921218fd85937-a27802edb04e54e9-01
content-length: 42
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js
142.250.74.163200 OK 15 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js
IP 142.250.74.163:0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:37:29 GMT
expires: Thu, 14 Sep 2023 05:37:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 00:24:01 GMT
content-type: text/javascript
age: 144219
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 00:48:31 GMT
expires: Sat, 09 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 593557
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.163200 OK 2.2 kB URL HTTP/2 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.163:0
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 20:02:15 GMT
expires: Mon, 19 Sep 2022 20:02:15 GMT
cache-control: public, max-age=604800
age: 265133
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1&page=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&es=visitorInfoFlowStarted&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1663278053282&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F
192.229.221.25200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1&page=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&es=visitorInfoFlowStarted&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1663278053282&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1&page=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&es=visitorInfoFlowStarted&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1663278053282&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 15 Sep 2022 21:41:08 GMT
expires: Thu, 15 Sep 2022 21:41:08 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: c95185fbf3503
pragma: no-cache
server: ECAcc (frb/67C4)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=180
set-cookie: ts=vreXpYrS%3D1757972468%26vteXpYrS%3D1663279868%26vr%3D4319347e1830a570ff14729affffffff%26vt%3D4319347e1830a570ff14729afffffffe; Expires=Mon, 15 Sep 2025 21:41:08 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D4319347e1830a570ff14729affffffff%26vt%3D4319347e1830a570ff14729afffffffe; Expires=Mon, 15 Sep 2025 21:41:08 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000c95185fbf3503-26f15984f4d37649-01
content-length: 42
X-Firefox-Spdy: h2
www.paypal.com/targeting/graphql
151.101.193.21204 No Content 0 B URL HTTP/2 www.paypal.com/targeting/graphql
IP 151.101.193.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /targeting/graphql HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.paypalobjects.com/
Origin: https://www.paypalobjects.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.paypalobjects.com
access-control-expose-headers: Paypal-Debug-Id
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f6777908bbc07
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 16 Sep 2022 06:27:04 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 15 Sep 2023 21:41:08 GMT; Secure
x-pp-s=eyJ0IjoiMTY2MzI3ODA2ODg3NCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
nsid=s%3AG9ZnZwAN4EihO2UZHnN7Qz80FDyFCyhl.wD9aTvkiVW%2B1sMoLLHX%2FO6i8YT5IcbVIq8iAhTPvgsI; Path=/; HttpOnly; Secure
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Thu, 15 Sep 2022 22:11:08 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1757972468%26vteXpYrS%3D1663279868%26vr%3D4319347c1830ad04b339e6b0ffe4aa26%26vt%3D4319347c1830ad04b339e6b0ffe4aa25%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 14 Sep 2025 21:41:08 GMT; HttpOnly; Secure
ts_c=vr%3D4319347c1830ad04b339e6b0ffe4aa26%26vt%3D4319347c1830ad04b339e6b0ffe4aa25; Path=/; Domain=paypal.com; Expires=Sun, 14 Sep 2025 21:41:08 GMT; Secure
traceparent: 00-0000000000000000000f6777908bbc07-3dcb878e0074d8e8-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Thu, 15 Sep 2022 21:41:08 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11556-HHN, cache-bma1667-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1663278069.779405,VS0,VE177
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yV/l/0,cross/R_Z8JBHbHIu.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.9 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yV/l/0,cross/R_Z8JBHbHIu.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4093)
Hash abbfb75f5922c7118294fbd70cdcd95e
312dcd892d54d50ef115136edf07b8ff17a7d6e1
e12b80add99a03c3798fdb67f0d48f5aea06675cf27a134f457f33d330e9fbf5
GET /rsrc.php/v3/yV/l/0,cross/R_Z8JBHbHIu.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 17:42:18 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: q7+3X1kixxGClPvXDNzZXg==
x-fb-debug: +qkbJbGUsl1z8Hvk3a2KYmXRv5GPl8w7/uFfTO66uuq0ly76c3df8Lg2jnw8uEyUJNhFztLq3Qcu572RoTMN2Q==
content-length: 4896
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Sep 2023 16:41:06 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: F/Ks6L/ODrGWpooL/ydi60V2ddMBtGP2Q6SkRGsN0DyBdQzqhFy78deSITTx40Qox5sSGo1JLYKucRRUBb7stQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y0/r/4bxt0IX69HT.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y0/r/4bxt0IX69HT.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18537)
Hash 4b73ab5afcda5dd1bdb7836eef76d95d
478b61687291763395c26732ce524f5213f90c1a
24828be530ccd514b677efddcdd60313ad3e96aaf162954b2a68aeffb4e1fa86
GET /rsrc.php/v3/y0/r/4bxt0IX69HT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 06:03:03 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: S3OrWvzaXdG9t4Nu73bZXQ==
x-fb-debug: tgAYKCCgFh44qAZVbds9oE49VBIZ6b8fw6zfLQL6uPU97uydL9fi7kY83j6kddcaMrX6P7vL8YxOApo7Hw0Rrw==
priority: u=3,i
content-length: 91220
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ym/r/zJk1XislC_2.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ym/r/zJk1XislC_2.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2020)
Hash 109bad15c2f9cf6ad723e68d94b36bfa
39a71a7a6dc9f0ded8c3bdef60764b77128e036b
ffcfa2bb1834f7b23dbb345e7b50fa6cfff39fd381162c4e9d9b43d4a333c24d
GET /rsrc.php/v3/ym/r/zJk1XislC_2.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:42:12 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: EJutFcL5z2rXI+aNlLNr+g==
x-fb-debug: UfaxGCbBN9cKTLZo/Qy5GmxUjXvGMJmXKdIMhc4lw1OUIT32ho8/iZ7g1QCoiNCg5J+LEPtZn8dUY2vN1LUxHg==
priority: u=3,i
content-length: 1665
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yG/r/A6jHkjFD25T.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yG/r/A6jHkjFD25T.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5297)
Hash d0048c469ad4b188ddc4ebb9bd7373ea
3c2be70ede32813b7071f82f3fc973e460bace72
bb508f686e750c92ecc335cdedbdb3a5e6b62895b71c4b91255faccf91af6e40
GET /rsrc.php/v3/yG/r/A6jHkjFD25T.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:16:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 0ASMRprUsYjdxOu5vXNz6g==
x-fb-debug: Txade6qfRGhvGCC9k43gCAQtsrgUJxMo1lhrNS0QwbzdWhjC1eOGo7XpUoZ/rPdMoeGgsBpnjt/oJHfiCudwYQ==
priority: u=3,i
content-length: 12220
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y2/r/2v3YktoK84u.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y2/r/2v3YktoK84u.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (7335)
Hash cc9dc524764f2664cfb1ada75f08fb20
4daef2f323bc6ca85a909ae229e90ea3aceedcf0
b03eb68a8a8ee0e2979a6c8686ecf8d0ed53dd8918a53fc093eb8163db3975f1
GET /rsrc.php/v3/y2/r/2v3YktoK84u.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:16:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: zJ3FJHZPJmTPsa2nXwj7IA==
x-fb-debug: 6iwGd7bYt8I2pntubtU8Iyos+XtMUV1Bk0MDMDVF3OZWl/ea3QOniOuGeQWQAuwMCGB98digIVsZsUKuI3QSvg==
priority: u=3,i
content-length: 15927
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/s86VHI0OK1z.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 9.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/s86VHI0OK1z.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (9922)
Hash 8f060a3a442e5982de64d732f6851eee
32bb91bc423eb88704a409953f4c717af7e2d0be
975d86187415392478e314dd229846a7ecdd00e7d1c1431cdac3112b5ef5942b
GET /rsrc.php/v3/yD/r/s86VHI0OK1z.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:16:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: jwYKOkQuWYLeZNcy9oUe7g==
x-fb-debug: ZIuPVEBAfH5BvXNQGM4v4g+OUa7qB8J10Vau219/lRqnY5y9P71eB0PXIJEynSqQApG2K9uVsnDH/3KXeWobAg==
priority: u=3,i
content-length: 9066
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 338 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (327)
Hash 76f593e842677f73cd0a06232874b2c3
25a13f79478d5a0e286a2299dca2f3b296463079
74dcbe026002f10b703960a500b50dabe518862e568a9e689dec7afa243fa44d
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 05 Sep 2023 14:02:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dvWT6EJnf3PNCgYjKHSyww==
x-fb-debug: 5mxlJKEHRVzOPZRd5dc5NdCwXfRS09Pae23JDC5s9/9yssNrwALql8EjtqKvYEotu6WgKtF/UubK6hmu+7OaYg==
priority: u=3,i
content-length: 338
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEpO4/y0/l/en_US/Cvm1ASjcHJt.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 23 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEpO4/y0/l/en_US/Cvm1ASjcHJt.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (42013)
Hash 5599b5c41c12d99f4e1f7c2150b48dd1
78526a45a45c72de98a420e4ff272defedebbcf7
77e1eddfac0ad09dc8afac43eae0f1f2f2bff9c0ac5a19343551ef1ac6dabd09
GET /rsrc.php/v3iEpO4/y0/l/en_US/Cvm1ASjcHJt.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 04:26:37 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: VZm1xBwS2Z9OH3whULSN0Q==
x-fb-debug: fDM6ykWSCS59UW7PG0IemV0GuMyfgj6gSWCyXXcbaduKJqfZmUGQU2BuGDAjcsq2/j24LVGD7d6XDzQ7fCD2dA==
priority: u=3,i
content-length: 23358
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/NIK12phMcsp.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/NIK12phMcsp.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4097)
Hash 0213c3325ddb8fc6663e46d09b64a8d0
9b5e6fae4f2bf5aafca4b0d71f3856e2dc359e9f
84e08583f859888e28f4b57c5ffb4fe7b52b05487e9716eee9fdd663d6a0a932
GET /rsrc.php/v3/yR/r/NIK12phMcsp.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:16:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: AhPDMl3bj8ZmPkbQm2So0A==
x-fb-debug: Pp81lupRqkYRiGt9IiRJMFxxtVP+jmFpXEpPt7ailkHXT2wrSzNDRGce/IU5hyxNJlVcMUsM9phZxayXvsEJpg==
content-length: 7275
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-23699453-1&cid=1653391526.1663278053&jid=1139809684&gjid=1902581760&_gid=1030187991.1663278053&_u=IEBAAEAAAAAAAC~&z=1612633620
142.251.1.155200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-23699453-1&cid=1653391526.1663278053&jid=1139809684&gjid=1902581760&_gid=1030187991.1663278053&_u=IEBAAEAAAAAAAC~&z=1612633620
IP 142.251.1.155:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-23699453-1&cid=1653391526.1663278053&jid=1139809684&gjid=1902581760&_gid=1030187991.1663278053&_u=IEBAAEAAAAAAAC~&z=1612633620 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.mesquitefloors.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 15 Sep 2022 21:41:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
31.13.72.12200 OK 573 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
IP 31.13.72.12:0
File type PNG image data, 13 x 39, 8-bit colormap, non-interlaced\012- data
Hash d3b686ff6004b431d5019e4b51a8cc0d
34ec288bdcad2eada81c75960439bf60b95eb285
96e3e8dfde6b1042514824bac1b44282d4a76bac028f2d767f6534dce2cf3db0
GET /rsrc.php/v3/yw/r/UXtr_j2Fwe-.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yV/l/0,cross/R_Z8JBHbHIu.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: 07aG/2AEtDHVAZ5LUajMDQ==
expires: Thu, 14 Sep 2023 01:52:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: 49qGl5XPCSNzV1glXipRq3pjLUnoJuE58AOt4ZWdWZ7lQg72C2HmSTe//XBUsA68UuVgGNkr5ZYbUniN6yAF5Q==
priority: u=3,i
content-length: 573
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.mesquitefloors.com/?wc-ajax=get_refreshed_fragments&elementor_page_id=41
172.84.132.151200 OK 222 B URL HTTP/1.1 www.mesquitefloors.com/?wc-ajax=get_refreshed_fragments&elementor_page_id=41
IP 172.84.132.151:0
File type JSON data\012- , ASCII text, with very long lines (424), with no line terminators
Hash 51e36d7437c704b480094df8c652b02b
1ce2da6aa02e482e5cdc6f93e9c699b1181e7d24
fc43cc905ca9e522a55465021e97a1fe93a6e4e0afeb3d46007dac2723c62f8d
POST /?wc-ajax=get_refreshed_fragments&elementor_page_id=41 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:06 GMT
Server: Apache
Access-Control-Allow-Origin: https://www.mesquitefloors.com
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 222
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/json; charset=UTF-8
static.xx.fbcdn.net/rsrc.php/v3/y_/r/oK1rTf8g9EA.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 46 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y_/r/oK1rTf8g9EA.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (65436)
Hash 2f606a4f0d847b63776b46dfef44980c
a112d2f7688064b00abeceb53f6709b9e8650cb5
4f887ef6d279c777a962de4dfd215c59f955b908fe7bf202a006ca16d584c4a8
GET /rsrc.php/v3/y_/r/oK1rTf8g9EA.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 17:35:35 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L2BqTw2Ee2N3a0bf70SYDA==
x-fb-debug: 5wFE4Hj7UlN2nrlcO+ueVvAEua9JybnIb5hh+8jtrI0M67h3aMX86amEOKm0jG7zwHhkz7ui8vLq0gSitNMzEA==
content-length: 46014
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:41:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
31.13.72.12200 OK 1.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
IP 31.13.72.12:0
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash ac1e1c4d6f16359701b059ed4e8246b4
ff19b30a3b3d8d1765c239b25dbc98cb3263786a
45444d590a67d30e8b2fde01bb6482f829383b64bf14a4b19b86e22fdc319fbb
GET /rsrc.php/v3/yH/r/xgVgalBG80z.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yV/l/0,cross/R_Z8JBHbHIu.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: rB4cTW8WNZcBsFntToJGtA==
expires: Sun, 10 Sep 2023 21:19:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: F9eFeIGBCit24CyeXfDQ3DEn75Xd+08jJCP6LHApHxLdKbq4JZYtt7TYCd9oerZ6gjGaiEo74NYU/v93KZGj2Q==
priority: u=3,i
content-length: 1315
x-fb-trip-id: 2074150462
date: Thu, 15 Sep 2022 21:41:09 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1&page=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&es=visitorInfo&cust=KYAU8NYLDLWT2&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=85&identifier_used=DFP&e=im&t=1663278053831&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F
192.229.221.25200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1&page=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&es=visitorInfo&cust=KYAU8NYLDLWT2&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=85&identifier_used=DFP&e=im&t=1663278053831&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1&page=muse%3Aoffer%3A%3A%3AHS9VFZWD6MDKS-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=5772c0ef-d025-41ae-b36b-9090d809fe6a&es=visitorInfo&cust=KYAU8NYLDLWT2&mrid=HS9VFZWD6MDKS&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Home%20-%20Faifer%20%26%20Company%20Inc.&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=85&identifier_used=DFP&e=im&t=1663278053831&g=0&completeurl=https%3A%2F%2Fwww.mesquitefloors.com%2F HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Cookie: tsrce=targetingnodeweb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 15 Sep 2022 21:41:09 GMT
expires: Thu, 15 Sep 2022 21:41:09 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: b185d00b9b8dc
pragma: no-cache
server: ECAcc (frb/6698)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=198
set-cookie: ts=vreXpYrS%3D1757972469%26vteXpYrS%3D1663279869%26vr%3D431936ac1830a9806ae73a5cffffffff%26vt%3D431936ac1830a9806ae73a5cfffffffe; Expires=Mon, 15 Sep 2025 21:41:09 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D431936ac1830a9806ae73a5cffffffff%26vt%3D431936ac1830a9806ae73a5cfffffffe; Expires=Mon, 15 Sep 2025 21:41:09 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000b185d00b9b8dc-0bbe8b47a4c89182-01
content-length: 42
X-Firefox-Spdy: h2
www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
172.84.132.151200 OK 0 B URL HTTP/1.1 www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
IP 172.84.132.151:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0 HTTP/1.1
Host: www.mesquitefloors.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.mesquitefloors.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.16.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:41:05 GMT
Server: Apache
Last-Modified: Tue, 16 Aug 2022 15:35:11 GMT
Accept-Ranges: bytes
Content-Length: 93372
Cache-Control: max-age=2592000
Expires: Sat, 15 Oct 2022 21:41:05 GMT
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: font/woff2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBarlow%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSource+Serif+Pro%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=e95333f7e53cc584892475bc3c55882f
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBarlow%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSource+Serif+Pro%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=e95333f7e53cc584892475bc3c55882f
IP 142.250.74.10:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBarlow%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSource+Serif+Pro%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=e95333f7e53cc584892475bc3c55882f HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Sep 2022 21:41:05 GMT
date: Thu, 15 Sep 2022 21:41:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
151.101.193.21200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 151.101.193.21:0
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.mesquitefloors.com/
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.mesquitefloors.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f79688594048d
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 16 Sep 2022 06:27:05 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 15 Sep 2023 21:41:09 GMT; Secure
x-pp-s=eyJ0IjoiMTY2MzI3ODA2OTY5OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 18 Sep 2022 21:41:09 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Thu, 15 Sep 2022 22:11:09 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1757972469%26vteXpYrS%3D1663279869%26vr%3D431937a61830ad009a40b8c7fff47551%26vt%3D431937a61830ad009a40b8c7fff47550%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 14 Sep 2025 21:41:09 GMT; HttpOnly; Secure
ts_c=vr%3D431937a61830ad009a40b8c7fff47551%26vt%3D431937a61830ad009a40b8c7fff47550; Path=/; Domain=paypal.com; Expires=Sun, 14 Sep 2025 21:41:09 GMT; Secure
traceparent: 00-0000000000000000000f79688594048d-8bd26bcbdde3e05a-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Thu, 15 Sep 2022 21:41:09 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11574-HHN, cache-bma1667-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1663278070.587006,VS0,VE193
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
151.101.193.21200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 151.101.193.21:0
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1495
Origin: https://www.mesquitefloors.com
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.mesquitefloors.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
etag: W/W/"3f7-/Uh2uRQzr2lJIsPMPfMcU+T4Tvg"
paypal-debug-id: f79688525ff24
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 15 Sep 2023 21:41:09 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 16 Sep 2022 06:27:05 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Sun, 18 Sep 2022 21:41:08 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY2MzI3ODA2OTkwMCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Thu, 15 Sep 2022 22:11:09 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1757972469%26vteXpYrS%3D1663279869%26vr%3D431938701830ad04bf8d05d6ffe38609%26vt%3D431938701830ad04bf8d05d6ffe38608%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 14 Sep 2025 21:41:09 GMT; HttpOnly; Secure
ts_c=vr%3D431938701830ad04bf8d05d6ffe38609%26vt%3D431938701830ad04bf8d05d6ffe38608; Path=/; Domain=paypal.com; Expires=Sun, 14 Sep 2025 21:41:09 GMT; Secure
traceparent: 00-0000000000000000000f79688525ff24-5b71a98ed1856b2c-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Thu, 15 Sep 2022 21:41:09 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4046-HHN, cache-bma1667-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1663278070.790408,VS0,VE196
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.facebook.com/v2.10/plugins/page.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df254c94d6f5b68a%26domain%3Dwww.mesquitefloors.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.mesquitefloors.com%252Ff3c4ad5942bfcf%26relation%3Dparent.parent&container_width=483&height=500&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Ffaiferandcompanyinc&locale=en_US&sdk=joey&show_facepile=true&small_header=true&tabs=timeline&width=500px
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/v2.10/plugins/page.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df254c94d6f5b68a%26domain%3Dwww.mesquitefloors.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.mesquitefloors.com%252Ff3c4ad5942bfcf%26relation%3Dparent.parent&container_width=483&height=500&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Ffaiferandcompanyinc&locale=en_US&sdk=joey&show_facepile=true&small_header=true&tabs=timeline&width=500px
IP 31.13.72.36:0
GET /v2.10/plugins/page.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df254c94d6f5b68a%26domain%3Dwww.mesquitefloors.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.mesquitefloors.com%252Ff3c4ad5942bfcf%26relation%3Dparent.parent&container_width=483&height=500&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Ffaiferandcompanyinc&locale=en_US&sdk=joey&show_facepile=true&small_header=true&tabs=timeline&width=500px HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mesquitefloors.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: Jq0jNrfOFRItbGTx51DtYgwPxw7W336H/bF8GRwwqY/r52RMHCX6p1QxnY2opgJh0icod7bsN2gr5LsJJj4J0Q==
date: Thu, 15 Sep 2022 21:41:08 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2