ocsp.digicert.com/
200 OK 471 B IP
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4665
Cache-Control: max-age=109165
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:39 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 11:49:04 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11652
Expires: Thu, 01 Dec 2022 08:43:51 GMT
Date: Thu, 01 Dec 2022 05:29:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 05:19:45 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 594
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4821
Expires: Thu, 01 Dec 2022 06:50:00 GMT
Date: Thu, 01 Dec 2022 05:29:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: O+hZIi2jgzRlYRzG278iZQY5CXJbXxjHhdrAxvkEbvLQpQjCV+Wkq00eN2G45IlvxOTAtwsej+8=
x-amz-request-id: MB646FYSC9120KME
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 04:46:08 GMT
age: 2611
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 05:29:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 05:11:15 GMT
cache-control: public,max-age=3600
age: 1105
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4661
Cache-Control: max-age=104092
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:40 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 10:24:32 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2qMlEz6aOddRue/ErqBN5Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3qMuPZ6l6BzzPYLbssM+2DgWcls=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16037
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 05:29:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16037
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 05:29:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16037
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 05:29:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16037
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 05:29:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16037
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 05:29:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1df312f-7c86-4a62-be1e-1a72c9b2d228.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1df312f-7c86-4a62-be1e-1a72c9b2d228.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72735620afafb0d8d91b6d83cf292298
9de2fd7c375e92fd60444dc677cf09428393eff3
9dd40d4adf9e3dacb962cc6e1bd00d38473125567eb2b57eef643be972dfe69f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1df312f-7c86-4a62-be1e-1a72c9b2d228.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8660
x-amzn-requestid: 9474178d-c342-498a-996d-1ef3b804f1a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cWh0hEx_oAMFjmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6385b01c-33e27513010fdec8627942be;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 07:09:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p4sQ43g-dkGS2IVyfZGDcOWowlL4wI7eEno7_fJAcLaVmunsMAponQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 07:21:04 GMT
age: 79717
etag: "9de2fd7c375e92fd60444dc677cf09428393eff3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:29:35 GMT
age: 57606
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8802d5080eb35e4052ef31cf7658650
1e78566f2e69268c5f753fb49112ab07aae3eccf
9c96906ee1dea353198c9069fa7e42b100e4fa766e5be8e4d8db036033961086
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4409
x-amzn-requestid: dc9ccdbf-a051-49ce-a535-c100b8ee6f12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz81EHdoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-0b06c368156b828e0c663081;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UsYYNMsulshDYcUC9N2Q3fnxjdZd5ki-0_LlXRchIsNSq0FruNhFqw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:48:09 GMT
age: 27692
etag: "1e78566f2e69268c5f753fb49112ab07aae3eccf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bbca075-74f3-4647-8b00-66430fff5397.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bbca075-74f3-4647-8b00-66430fff5397.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70afa08b7d0b64772b90ae190689e6c1
527cf32104041423176fadd3cfc2120fe63f6bfc
31ebf9decb53b8180922c4b10d0427aba95a802246a5ced8ec368d814a33b843
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bbca075-74f3-4647-8b00-66430fff5397.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9993
x-amzn-requestid: 7d7febbc-2bdf-44e9-9727-9c56b5bcb138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1VNFZiIAMFV-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cf54-1f89231026a9b5c467324134;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:47:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qK6AAXX3bqNSjQerE2jNysmMWX6X5j4Mm-MRQfG06YU7YmklFfE3NQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:50:08 GMT
age: 27573
etag: "527cf32104041423176fadd3cfc2120fe63f6bfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02cf22ee-ded9-4b9d-b5d8-ee6690ac9f45.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02cf22ee-ded9-4b9d-b5d8-ee6690ac9f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f07f254d44ff2fb86ee22cee39ef3eb0
0660a548a491d4a58ca2246f094f0553437c3f61
859b2416d638b1dc91ff563800517124b38d45b4c5db99e21539c1700829dbe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02cf22ee-ded9-4b9d-b5d8-ee6690ac9f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10985
x-amzn-requestid: ef9e5eb9-b7b3-41e9-9837-a5979ab35d94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV91OFzsoAMFcew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63857687-53b152c0027d26e52383e27e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JGFRksMQ_LxceeV_368Xt-gjhd67bMn7D_s0X1V1fAiR6npuqCHayw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 03:10:11 GMT
age: 8370
etag: "0660a548a491d4a58ca2246f094f0553437c3f61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38aeadfb-098c-4e6a-8abc-40288efe2526.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38aeadfb-098c-4e6a-8abc-40288efe2526.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 609419f1a2c58ae67febde5e2cb91c9f
bfb37735a2500848338a8fa12f28516a1ad9b5ba
32a4a65c8bd4da715b5331537bd606bab2767ad8c07af3b8aebbe5cad5591812
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38aeadfb-098c-4e6a-8abc-40288efe2526.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3751
x-amzn-requestid: 80396218-5515-4f77-9d57-95b323e1f1c0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzNHHGGoAMF8mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbed-09f83d1a5b7f65175fb137ab;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _mQdH9J5CaTiYNIQf5xVn-HGUP5tKhW_1foVDdpsVIoG_NKb9wZOJg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:48:09 GMT
age: 27692
etag: "bfb37735a2500848338a8fa12f28516a1ad9b5ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C700%2C700italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=3.2
200 OK 1.7 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C700%2C700italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=3.2
IP
Hash ac281b556eb9569a76309663123c7cbf
1d8dff51f688660b6222c967b216789110eb9f53
0422a9cef989f2f40f22723e7bce7ddef8a440c3c5e6c123cbccca16ade94ff9
GET /css?family=Roboto%3A100%2C100italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C700%2C700italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=3.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 01 Dec 2022 05:29:42 GMT
Date: Thu, 01 Dec 2022 05:29:42 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
goyalhoteliers.com/
200 OK 32 kB IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash fbddce1354826342ef316f0c0a90c173
1686a7fba2609f1ec4ae9f31c5385e1edcabda96
be384e951cb38f53c0d35603bfd52f1b349cccdf6f494d5d6cf9a8c620426441
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:39 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://goyalhoteliers.com/wp-json/>; rel="https://api.w.org/", <http://goyalhoteliers.com/wp-json/wp/v2/pages/690>; rel="alternate"; type="application/json", <http://goyalhoteliers.com/>; rel=shortlink
Set-Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
200 OK 4.0 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (19233)
Hash 2701214b028ad24fa347df8335b36d12
156bc8a7ad2657f00881890637f07c6052636499
9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4008
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.6
200 OK 1.6 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (13766)
Hash e87d5c79f690e58a9b3054c7d434a6ce
87b59fc692693d9b322e5bfdd7f38a471ffb81a4
46b6060ff97b37f83ed0717fdc8341c3b94f077ce568957d54e552887e2cd64c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1608
Keep-Alive: timeout=5, max=75
Content-Type: text/css
goyalhoteliers.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 18 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (47826)
Hash 9415c9562591af7a582c29139621505f
0b12eecf36a48b871a3198550f4f65bb4a6d9b1b
06c70d3232c2ae3ed2aa259eb7a1beb329b654926813935fffa8902cd5ebaa4a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 16 Nov 2022 00:08:43 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
goyalhoteliers.com/wp-content/uploads/elementor/css/post-680.css?ver=1663521367
200 OK 409 B URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/elementor/css/post-680.css?ver=1663521367
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1249), with no line terminators
Hash 574050e87ca1a23e5bf152ef646c2a16
00fbf703bdf4ad44ec7a181fb45e13fa36715963
18f508f30c7fd8c9d786a1409d21bc3bb55937954afd42424d0721666fe5b69e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-680.css?ver=1663521367 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 18 Sep 2022 17:16:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 409
Keep-Alive: timeout=5, max=75
Content-Type: text/css
goyalhoteliers.com/wp-content/themes/phlox/css/other/elementor.css?ver=2.10.0
200 OK 231 B URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/css/other/elementor.css?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 9caee1f365c4a4f583f4736e2edf931a
e0d1684d37cb272b5a9ed756dabf70150793ecc6
f323ee379be7ddc9489df88638e12a50c17be09cd8f604445722cc9374a324cf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/css/other/elementor.css?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 231
Keep-Alive: timeout=5, max=75
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=2.10.3
200 OK 108 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=2.10.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 1a1360d25e17078f0b275a0dcb28ac83
94981c58abb8cd738a8341783214f6d70901e38f
053002344403da64413de62dcb2a9acbd3d53463281348d8dffb88b68d34c864
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=2.10.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 108
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
200 OK 3.2 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (11256), with no line terminators
Hash 1054d0d53548e8bae51665b11acc6413
2eea6a05fe18db61fff58c431d34a86b3e0b7ade
cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Tue, 29 Sep 2020 21:23:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3239
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1
200 OK 1.3 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (4186), with no line terminators
Hash 91bab39b98d7e5c1632717b9ebe349e4
e639a447d06fc7827be5b5b35d603ff16b5f7bb1
47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Sat, 08 Jun 2019 02:15:02 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1298
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
200 OK 11 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (45767)
Hash df211a85dd1c81e1354cbd145099ad01
06d90bc312ec09995f95b4a1a9eceba0552145a3
9f1659628a94ac401c9c27df67686413d648d4be5196adc436b0b7b072763b50
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-690.css?ver=1663522707 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:38:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11078
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.6
200 OK 32 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65497)
Hash 5ce1ea1ba2618023de0d3865493d74a0
da2e3c9b682b1f92f41feef41d0238cd793059fd
8f538cba04b84478309bf2038b52ef6ca1b23bfad51088949c933c67190181f8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
200 OK 12 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (1646)
Hash e56098a703c5beb99abc9c3a870be594
76e54634e0628ab91310c760d619360151e26be1
0eb4438e57550f2c2a321d45a5cb1c92fb22d58f6dbcc9c189fc3bd1e4f78b8f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 16:54:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11654
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goyalhoteliers.com/wp-content/themes/phlox/css/base.css?ver=2.10.0
200 OK 25 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/css/base.css?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (448)
Hash b98d987298a95203ce636e069ea00b35
78c2987d88356de50430eb5ece8f10f7a138a41d
70903f578b36f55b82605b186859c2f4b1dc43aa94551dbf49dfaf24851ef727
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/css/base.css?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:42 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
goyalhoteliers.com/wp-content/themes/phlox/css/auxin-icon.css?ver=2.10.0
200 OK 8.9 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/css/auxin-icon.css?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (448)
Hash bfa8d1e9a44730d72cc370d0017971d1
f8cbd49538e7681026ec95f7371ec24f347f5510
edc0f04232bc5f0255b796f451af7b2cc484107a98a53280fc01c66d73cd71fd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/css/auxin-icon.css?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8867
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/uploads/phlox/custom.css?ver=3.2
200 OK 1.3 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/phlox/custom.css?ver=3.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (395)
Hash 365a0c0ea6f5472f58e843265618cb52
6aac19c5aba0f41fd6d64563dbcaa6a92c7e25b2
dd25c1d8ea79884eb0f6767d4c76bbfa3c1a686c5e7a49d4e13b7e66c09aad10
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/phlox/custom.css?ver=3.2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Tue, 11 Oct 2022 22:16:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1321
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/uploads/elementor/css/post-677.css?ver=1663521368
200 OK 555 B URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/elementor/css/post-677.css?ver=1663521368
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (2372), with no line terminators
Hash 7d1774fc7bcf7d3db7e5e099af0d135f
951db35329f7b2e6bb514232a643d1c8b70171ab
3be71fe8346b8968bb7141057e40472e40075674e48231088b8fa79db9098d36
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-677.css?ver=1663521368 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:16:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 555
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/uploads/elementor/css/post-682.css?ver=1663521368
200 OK 3.2 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/elementor/css/post-682.css?ver=1663521368
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (9086)
Hash 0500e8a01b79bbb6c8b00352a98c731d
e6a1b61e5dfadd297c3d7a59617b5eab841ca265
b808adb1b7ca184a713e9fbc09dc788ce3c00d4581533cec5677e60867546b98
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-682.css?ver=1663521368 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:16:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3200
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 13 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12577
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
200 OK 308 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 309 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 309
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Wed, 18 Nov 2020 14:36:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4618
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 39 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65447)
Hash 32f58a61f7c5a7e10f8b2dcf8e9a8e34
865c25589283ab1debd45bdfa6c4d8c6ecf15ad3
481cb2216fbdb0797af8c61b69c0bda2c10d025f7b11f2cdfac382d35dc45d63
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 12:56:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
goyalhoteliers.com/wp-content/themes/phlox/js/solo/modernizr-custom.min.js?ver=2.10.0
200 OK 7.4 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/js/solo/modernizr-custom.min.js?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with very long lines (19371), with no line terminators
Hash 2f146ca91524a99f47523ab2b4a539f6
f7baf9c05ce55a8e961904bfe676ffca22054720
d0dcc9ea8e58b26688d4114507ef786e6eeb85b3609dcea41ba8dd85cae17f18
GET /wp-content/themes/phlox/js/solo/modernizr-custom.min.js?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7380
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/themes/phlox/css/main.css?ver=2.10.0
200 OK 141 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/css/main.css?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (617)
Size 141 kB (140550 bytes)
Hash 2b23e7e0a0a6cb388a73252fcdb557d6
28cc4591db727137930f27aed5c299954bb2bba2
ae0ffa06af19aa73cb63a225adb0906d486634fb2c03cec70639fd2b937bddb8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/css/main.css?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
goyalhoteliers.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.3 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Tue, 12 Apr 2022 11:26:24 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5321
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 189 B URL HTTP/1.1 goyalhoteliers.com/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 12:56:24 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 189
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/wp-ulike/assets/css/wp-ulike.min.css?ver=4.6.3
200 OK 5.6 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/wp-ulike/assets/css/wp-ulike.min.css?ver=4.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (21048)
Hash a7caa2d3087b73468aaeaa70993e65fe
f9578a27ee934f9362dd24f01a9dacef802f92ec
852afa1959727049ddaa5a4e891454876548d9487e75959a835463a9d3817945
GET /wp-content/plugins/wp-ulike/assets/css/wp-ulike.min.css?ver=4.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 16:22:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5565
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
200 OK 323 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash b24c24b7da3ffeed6ae8ade102a4d317
c4445b3977ce704b927508108e100213eea67a3c
5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 16:54:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 323
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.6
200 OK 3.0 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2997
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
goyalhoteliers.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 2.1 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (5477)
Hash f0bd7ad12acdee26cbb2701c1ba3610b
53c5d15129860868b60b74cb010b2c6050a64f69
e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 14 Jun 2020 00:23:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2103
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 9.2 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/masonry.min.js?ver=4.2.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (23966)
Hash 2a730dafa34e6ff81513d31e486cdbdb
1fce17d256f67ae086d74092a03006997d9b0add
7a5fd36a453a3a7471fa93b8169579f9a98e2df7a262c44d28d3de41a0f7ae1c
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sun, 14 Jun 2020 00:23:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9216
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
409 Conflict 83 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 409 Conflict
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goyalhoteliers.com/wp-content/themes/phlox/js/scripts.min.js?ver=2.10.0
200 OK 18 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/js/scripts.min.js?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (56152)
Hash fb00eac34e67cf5e31fd34f7a6cb08ff
0e7961c0856bdb858832e851967d8d06e61372d3
a5b8e0f3ba49d750a1527c28fcaf476630c4fbff3248ae174887ee1c7faf1664
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/js/scripts.min.js?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.10.3
200 OK 772 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.10.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 0218badce165a8dd63b372fc7b4833b1
04d49ea3a81b53a9d3224455a64dc6e8c80c760a
59d2b0abd1c8d3e19ec7744c19e37eb64a19e731227c9523f8a1545e136a03d9
GET /wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.10.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 772
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1
200 OK 540 B URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1191), with no line terminators
Hash cea5e0013ee4b14895dc0f6c424a03e8
b21c776891ff57c003b385a1aa62ba613b292a21
1cfe89d6aa36aea0e986e379590ab23877257e8416764d18105d1176dfcd64d9
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Sat, 09 Apr 2022 01:37:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 540
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/themes/phlox/js/plugins.min.js?ver=2.10.0
200 OK 197 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/js/plugins.min.js?ver=2.10.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65536), with no line terminators
Size 197 kB (196578 bytes)
Hash 3b8918ed7487bbbd61c6e406b1b661ec
688c3610984d21d974a000a4284997959b102179
9f3cb99298afc1c0dedc5a543e30c024977c64acff74c56fcd97febd6fdccf01
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/js/plugins.min.js?ver=2.10.0 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.10.3
200 OK 12 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.10.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (31771), with no line terminators
Hash b893db8d7266f1ad0b4de2acc31f69e4
76627f47b9c35964418f93a6bd198a73977ba17d
8d608a85750a58ac31036c20dd14a3fb8fd10f2c4ba18d2519a4dbc9dfcf97d5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.10.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11521
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/wp-ulike/assets/js/wp-ulike.min.js?ver=4.6.3
200 OK 5.4 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/wp-ulike/assets/js/wp-ulike.min.js?ver=4.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (15639)
Hash f1595f47492e41d6fa115ea28fe3045e
6679d70f5413b9490e7cfab0ec3cbfd953292d0a
7d4b823dff2bff9e110e4ed88408147ffc98fbc1774bccffb2d3385026398efc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-ulike/assets/js/wp-ulike.min.js?ver=4.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 16:22:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5447
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.10.3
200 OK 3.7 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.10.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash e82ad7e078dc8216dc93e747034b9974
7beb816f0de01924b3f780ca00f471b906960649
67e1d7af21a1dec3ddfcb9ecc685eaf5955976e119c8fdd330e9cd29d279a23d
GET /wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.10.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3679
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 409 Conflict
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 409 Conflict
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goyalhoteliers.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
200 OK 57 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65266)
Hash a0839007057d0a873851616822d28b0c
09f8c7df6e85b3988914e5bede85da7efced9b10
e5d99783290a06aff4818e0ae78360f473b18544447c038606d59dcc4896a4f9
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 12:56:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
goyalhoteliers.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1
200 OK 483 B URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with very long lines (906), with no line terminators
Hash 961b384bf5b28ac673051be024563f79
606ebba9fa8aec74cf413098b084500c8b16b85c
a9c17b0e5a9c12428c6ed8d0c4622ddbae112a9ac19bccf451f125972cd91935
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:43 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 20 Jan 2021 19:05:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 483
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 36054
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2
200 OK 7.6 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7632, version 1.0\012- data
Hash 5426bf50c8455aab7a3e89d1138eb969
ec0cbbcb4600e691cb24a63451f758727f90a306
17ea10196a490a8d3b8da162c7d4af9c301c5229f70af90dad6fa33eb951d83f
GET /s/poppins/v20/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:46:22 GMT
expires: Thu, 30 Nov 2023 19:46:22 GMT
cache-control: public, max-age=31536000
age: 35002
last-modified: Wed, 27 Apr 2022 17:09:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 12:29:21 GMT
expires: Fri, 24 Nov 2023 12:29:21 GMT
cache-control: public, max-age=31536000
age: 579623
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2
200 OK 33 kB URL HTTP/2 fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 32860, version 1.0\012- data
Hash d010a9f2d5c7a0374b3b84706a43d2ec
c1fe465db08785c3f115555d39db23838960cb66
9a3993918629dfd6a59c4563e9b4d464152b51d4113957ab8ebfbdcbcdc7f536
GET /s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 27 Nov 2022 01:48:55 GMT
expires: Mon, 27 Nov 2023 01:48:55 GMT
cache-control: public, max-age=31536000
age: 358849
last-modified: Mon, 11 Jul 2022 19:12:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 35729
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 07:01:24 GMT
expires: Wed, 29 Nov 2023 07:01:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 167300
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 36054
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 36054
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 35750
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 35729
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:11:08 GMT
expires: Wed, 29 Nov 2023 17:11:08 GMT
cache-control: public, max-age=31536000
age: 130716
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goyalhoteliers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:41 GMT
expires: Tue, 28 Nov 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 211023
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:29:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goyalhoteliers.com/wp-content/uploads/phlox/custom.js?ver=8.9
200 OK 151 B URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/phlox/custom.js?ver=8.9
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 645bc3de93d99657553fde94f17db939
d953ddb6c9815423f168faeca9e7471cfde1a838
4d0e56b49c823d7a8071ab3d2c0fd51cfc584b9e5ff3a4cd39098ae1c3c1213e
GET /wp-content/uploads/phlox/custom.js?ver=8.9 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Tue, 11 Oct 2022 22:16:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 151
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13
200 OK 6.4 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 1a7cae61a8acbbcbd0eee38e317f0252
9234b65965a461535a05fc527c9ab420d13e5da0
54e1cad5404f393f2edf04a7c90a79acdec2eeaae6d7cf167701f952dc8d7e9b
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 16:54:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6389
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.6
200 OK 13 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (32889)
Hash 1ea3b142a2cfb959f7d8888bda8b814c
90808c045a76bbd97ec35d0d922486cb75441d8e
0d20ffb7ead5466ae8c403979b92fb3845b74e4fbd688db04146a6ed76f574d9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13281
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.7 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3747
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 8.3 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 838560e989767f2ef5951b9eeee20352
6bf8419cb4d68d9beced9e4b79b22b347ae16a46
72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 12:56:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8344
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.7.6
200 OK 1.2 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (2620), with no line terminators
Hash 55936584085d0d310919b755eda1ab3f
be317c3b2ed5143669375295b3107e591bf708da
aad2265c39cafa6e01b791b1ef5025a2d237ee91346ef446beb722fdcd578d58
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1187
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
200 OK 47 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65280)
Hash 6d3f8ba511b26a2b5e2555673e996be4
d5a3c1ed68beeeafc4da01d71a6b7ce0f19f985e
955d1e858ec91ca4b3f5c845421692afc83dcbca3dd52577f746e18278f45315
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.10
200 OK 2.8 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.10
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (6210), with no line terminators
Hash c74a284893e700efac7feda7f8ca29d9
e5f08422e3a5b9ed64676469e2d73ed9600ab3ee
01fb2bcfb32c7eabebccf5d1196cae451bae4f8ab247010f3cd6d86ef8521345
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.10 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 18 Sep 2022 17:08:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2759
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.6
200 OK 2.3 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (4918)
Hash b1aa8dffeb0e5cc114885d8380b049eb
50fb4980147661b85a802f2b933fa5ef7b21251b
eb91f6ee38baff1520a24b10c74caababb5263561c6b603294c379f4e952e037
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2313
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.6
200 OK 16 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (40474)
Hash 71e3344c64c07e805cfb44c4903cde26
d2fd0152311bd1bf8d4618876bd3251a38821465
6e0dc5336339cd40405097e3619c6e2eda0c3df61c394c81dd0cebe1388d1a9b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16152
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 409 Conflict
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goyalhoteliers.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.7.6
200 OK 17 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.7.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (43101)
Hash 7e585267f14d9801228cc5dcc56f607a
7fa988431553ef9f5873a9982aa6b85ba2da1bed
be23fadd82999a57768819d82733bc78db99e077093835518b2eef100c3a6995
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.7.6 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16899
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: application/javascript
goyalhoteliers.com/wp-content/uploads/2022/08/cropped-goyal.jpg
200 OK 17 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/cropped-goyal.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:31 15:23:14], baseline, precision 8, 250x50, components 3\012- data
Hash f7cdb6339bb2d981f23f2b3c8cacee48
d0c1a6cafe8d96e21b7fa96db7ae7f6641322791
207bc2c89245e3eb2e27c6ab2d7e7f11e3383bebb909dfea7d59018d1179475c
GET /wp-content/uploads/2022/08/cropped-goyal.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Wed, 31 Aug 2022 09:54:58 GMT
Accept-Ranges: bytes
Content-Length: 16711
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
409 Conflict 83 B URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 409 Conflict
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Content-Length: 76764
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: font/woff2
goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Sun, 18 Sep 2022 17:08:37 GMT
Accept-Ranges: bytes
Content-Length: 78196
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: font/woff2
goyalhoteliers.com/wp-content/themes/phlox/css/fonts/fontastic/auxicon/auxin-front.woff
200 OK 131 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/css/fonts/fontastic/auxicon/auxin-front.woff
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format, CFF, length 131252, version 1.0\012- data
Size 131 kB (131252 bytes)
Hash 49c64231fa6b7e6e8378706018a2b7e8
2b34a86455bfe6e14e1d0e2024bb5c5d3ca49844
1633f19adcd05d4a57f79797f2506b14f37feebcdac949004da0a64a678da8cd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/css/fonts/fontastic/auxicon/auxin-front.woff HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/themes/phlox/css/auxin-icon.css?ver=2.10.0
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Content-Length: 131252
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: font/woff
goyalhoteliers.com/wp-content/uploads/2022/08/Fatehpur-Sikri.jpg
200 OK 232 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/Fatehpur-Sikri.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:31 16:14:44], progressive, precision 8, 518x396, components 3\012- data
Size 232 kB (231557 bytes)
Hash 3fe01481e038223f87f5d72ee8fee592
cea83b3ff920dc50f8c97621b2d4d3b755d8285d
9b177336f8ab7662d8774795a48a5d4607c3a7364442fdeec33c1442e26c2dcf
GET /wp-content/uploads/2022/08/Fatehpur-Sikri.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Wed, 31 Aug 2022 10:45:24 GMT
Accept-Ranges: bytes
Content-Length: 231557
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/restaurant-interior-1-scaled.jpg
200 OK 1.0 MB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/restaurant-interior-1-scaled.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, description=Restaurant interior, xresolution=118, yresolution=126, resolutionunit=2, software=Adobe Photoshop Lightroom 6.7 (Windows), datetime=2017:06:25 13:35:36], baseline, precision 8, 2560x1706, components 3\012- data
Size 1.0 MB (1045274 bytes)
Hash b92c29cd4e48883f0649daee2723a7b3
7ea353e039d0dbfd9b61c12a4ee97eb8e8fe6a43
d59fab0a5fa5487b4f1571a6a4d7556717747c2656cef66d446c9b71c5387a5b
GET /wp-content/uploads/2022/09/restaurant-interior-1-scaled.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 10:10:44 GMT
Accept-Ranges: bytes
Content-Length: 1045274
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/08/redford-1.jpg
200 OK 353 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/redford-1.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:31 15:49:52], progressive, precision 8, 683x390, components 3\012- data
Size 353 kB (353168 bytes)
Hash 5e52c149ad5a691c31c2aa5ea7db7eaf
764b41c205b409b795fa2f6008325840222e728f
0adc11068bd20fa8e675511848f6d435526bb8faf5fb22d80f78364302f3e289
GET /wp-content/uploads/2022/08/redford-1.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Wed, 31 Aug 2022 10:21:49 GMT
Accept-Ranges: bytes
Content-Length: 353168
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/08/Gurudwara-Guru-ka-Tal.jpg
200 OK 213 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/Gurudwara-Guru-ka-Tal.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:31 16:19:22], progressive, precision 8, 518x396, components 3\012- data
Size 213 kB (213328 bytes)
Hash 809863a17afd0311082843a2582bb72b
3bc3587c033cbc456f2173f2b3b2860514151f7d
4357dd2d697fa4dad943523273d8271f76d7552e89271793cc2dc4cef3243ffa
GET /wp-content/uploads/2022/08/Gurudwara-Guru-ka-Tal.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Wed, 31 Aug 2022 10:50:35 GMT
Accept-Ranges: bytes
Content-Length: 213328
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/08/Akbars-Mausoleum.jpg
200 OK 246 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/Akbars-Mausoleum.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:31 16:13:41], progressive, precision 8, 518x396, components 3\012- data
Size 246 kB (245729 bytes)
Hash d78a5c596ade94bb5fd9dba6566ac93a
7f9b16d53d3f64d8e86b9fe3b6a7c9bfe23d9def
2f9ad025d8bcdd7d4653662af4dccb42ddfd837d4210a8766db9aec5b8bec272
GET /wp-content/uploads/2022/08/Akbars-Mausoleum.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Wed, 31 Aug 2022 10:45:23 GMT
Accept-Ranges: bytes
Content-Length: 245729
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/themes/phlox/css/images/svg/symbols.svg
200 OK 36 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/themes/phlox/css/images/svg/symbols.svg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (1030)
Hash 355b57fa7f8cf5fb6cfa8d7f648081b2
b08aa2cd55c7b83fb6268a23ffe62a3bf70bac96
6e374834b5250534c7a0d1ee195ff202bfcac639f55bc3c4a7ceb611b5591c2e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/phlox/css/images/svg/symbols.svg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/themes/phlox/css/main.css?ver=2.10.0
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 11:30:28 GMT
Accept-Ranges: bytes
Content-Length: 35726
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: image/svg+xml
goyalhoteliers.com/wp-content/uploads/2022/08/taj.jpg
200 OK 130 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/taj.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:31 15:46:46], baseline, precision 8, 683x390, components 3\012- data
Size 130 kB (130388 bytes)
Hash 1278593f8f2b5ca312d15c8b16e7b6db
af1b57f9448c6770de0e2d6393d1a08fcdaff0ce
a3ffa886e815a80d796f2aa550c4bf1b628b5aec63296afee8790afab75bae05
GET /wp-content/uploads/2022/08/taj.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 31 Aug 2022 10:21:20 GMT
Accept-Ranges: bytes
Content-Length: 130388
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/3d-rendering-beautiful-comtemporary-luxury-bedroom-suite-hotel-with-tv-1.jpg
200 OK 368 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/3d-rendering-beautiful-comtemporary-luxury-bedroom-suite-hotel-with-tv-1.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3\012- data
Size 368 kB (368192 bytes)
Hash 77b6f159bce2a1bf94e263c6be8836ca
21710e6aca8d64a4a10ef91b04fe84e54b631d49
61334405fc2d3788eee9b1453b694d8bf07fb6e291148ad887a67ebd9bb0b374
GET /wp-content/uploads/2022/09/3d-rendering-beautiful-comtemporary-luxury-bedroom-suite-hotel-with-tv-1.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 08:51:55 GMT
Accept-Ranges: bytes
Content-Length: 368192
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/luxury-waiter-holding-tray.jpg
200 OK 321 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/luxury-waiter-holding-tray.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 667x1000, components 3\012- data
Size 321 kB (321449 bytes)
Hash 2100f5b2f9b5b40b7235c965c32fcdd8
0f8b973ba43886e42c9ed697714c74cb5802282c
21008e085f451d283fd7bf2481ed3d4531056c09e08b23c239caa1e7a2f1fcf8
GET /wp-content/uploads/2022/09/luxury-waiter-holding-tray.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 09:31:16 GMT
Accept-Ranges: bytes
Content-Length: 321449
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/08/Untitled-2.jpg
200 OK 735 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/08/Untitled-2.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:29 23:08:24], progressive, precision 8, 1200x800, components 3\012- data
Size 735 kB (734795 bytes)
Hash 15f3fa7d3b0bb09022efad8148b5f480
65ec0bb378bade8eb88916961d85dfc0355df7af
839242b739c3087981296e3ed81dd309bc27fceef1f2b2254837fa2357fd77c3
GET /wp-content/uploads/2022/08/Untitled-2.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:44 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 17:39:20 GMT
Accept-Ranges: bytes
Content-Length: 734795
Keep-Alive: timeout=5, max=61
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/taj-mahal-agra-india.jpg
200 OK 480 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/taj-mahal-agra-india.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x664, components 3\012- data
Size 480 kB (479745 bytes)
Hash f14ab4e948e610baa1e598c02bc694ae
3f0b75a9c0d2807c8e771af354a3261389c8f724
e10de1a19cda6635d3b5b432032c1ebd6b4befdcdaccd5092e718dff4c58f2a1
GET /wp-content/uploads/2022/09/taj-mahal-agra-india.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 09:35:18 GMT
Accept-Ranges: bytes
Content-Length: 479745
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/empty-parking-lots-aerial-view-3.jpg
200 OK 1.0 MB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/empty-parking-lots-aerial-view-3.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3\012- data
Size 1.0 MB (1017235 bytes)
Hash ada0bd6a1236258ac087bb7d748ff111
f74f4f3241f521722f6f8b2079a38c9003dab0fc
a936bd1e6da8ef475dc6db1f316ad5704312a946df8c9b62fd240ed44bc39b06
GET /wp-content/uploads/2022/09/empty-parking-lots-aerial-view-3.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 09:44:48 GMT
Accept-Ranges: bytes
Content-Length: 1017235
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2019/10/hotel-tropical-summer-landscape-tree.jpg
200 OK 1.0 MB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2019/10/hotel-tropical-summer-landscape-tree.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1000, components 3\012- data
Size 1.0 MB (1020180 bytes)
Hash 5d9b3e064ffca8f7878e3e37e86aefc2
96e613f11d2b40e9e226a72fb60722f0fcaca711
075185a19ad2d1c16b7d60c633b3adad58f7377b5f170e78bf2500cb25db24b4
GET /wp-content/uploads/2019/10/hotel-tropical-summer-landscape-tree.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-682.css?ver=1663521368
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Sun, 04 Sep 2022 14:41:47 GMT
Accept-Ranges: bytes
Content-Length: 1020180
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/restaurant-hall-with-small-stage-monitor-red-curtains-brick-walls-white-napoleon-chairs.jpg
200 OK 1.3 MB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/restaurant-hall-with-small-stage-monitor-red-curtains-brick-walls-white-napoleon-chairs.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x800, components 3\012- data
Size 1.3 MB (1310382 bytes)
Hash cc8ba658ef1b1ecd4a842649c47a3614
801317ae312d3f766717dab28a536b1e0a663728
a2e68e3f6942584cb1ad67963e6bdfed3e910547ddc4e75391e185fcafa00077
GET /wp-content/uploads/2022/09/restaurant-hall-with-small-stage-monitor-red-curtains-brick-walls-white-napoleon-chairs.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 09:38:13 GMT
Accept-Ranges: bytes
Content-Length: 1310382
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/wp-content/uploads/2022/09/banquet-table-with-snacks-1.jpg
200 OK 813 kB URL HTTP/1.1 goyalhoteliers.com/wp-content/uploads/2022/09/banquet-table-with-snacks-1.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3\012- data
Size 813 kB (813331 bytes)
Hash 02d7e4e9cc23c479efaf7c7b89d17bf8
5907ef4e86b9e647f1930b78a71fac6f17b8b439
5a5e92ea9583af50544d1b7c93c4063a56b7bf00e86ede8335ad6c6dbc4804e1
GET /wp-content/uploads/2022/09/banquet-table-with-snacks-1.jpg HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/wp-content/uploads/elementor/css/post-690.css?ver=1663522707
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:45 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 09:16:32 GMT
Accept-Ranges: bytes
Content-Length: 813331
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
goyalhoteliers.com/favicon.ico
302 Found 0 B URL HTTP/1.1 goyalhoteliers.com/favicon.ico
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 302 Found
Date: Thu, 01 Dec 2022 05:29:46 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://goyalhoteliers.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: http://goyalhoteliers.com/wp-includes/images/w-logo-blue-white-bg.png
Content-Length: 0
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
goyalhoteliers.com/wp-includes/images/w-logo-blue-white-bg.png
200 OK 4.1 kB URL HTTP/1.1 goyalhoteliers.com/wp-includes/images/w-logo-blue-white-bg.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: goyalhoteliers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://goyalhoteliers.com/
Connection: keep-alive
Cookie: PHPSESSID=03b5a9c27638cda97d45a562735a56ca
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 05:29:47 GMT
Server: Apache
Last-Modified: Tue, 16 Nov 2021 05:34:02 GMT
Accept-Ranges: bytes
Content-Length: 4119
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1039182464db1365a476dd88029b97d8
06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac
2e081da1464a18d755a841558f63303634a9e22df888c9c43246565abfc3d48d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12655
x-amzn-requestid: beeeccd0-a494-4d0c-91e9-0d1e2ab37b6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0YoFmMIAMFT4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdd0-60f5e2286cf3965a42ab31b9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CiGOvF7Lmz8cICQcjUcE6QGokbAIAd3WClI4PK_aDSxo-yHVcPPA7w==
via: 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:29 GMT
age: 27859
etag: "06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLato%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLato%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLato%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goyalhoteliers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Dec 2022 05:29:42 GMT
date: Thu, 01 Dec 2022 05:29:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
199.79.62.225
23.36.76.226
93.184.220.29
0.0.0.0