| email.emarketingsg.com/tracking/lc/6a476513-f921-4df6-b648-067c78c1891c/752e82f5-25e2-47d8-a986-a0c3a99a175c/97b5c3cc-9aa8-4e58-b683-0ae35c36eee4/ |  212.32.243.36 | 302 Found | 0 B |
URL HTTP/1.1email.emarketingsg.com/tracking/lc/6a476513-f921-4df6-b648-067c78c1891c/752e82f5-25e2-47d8-a986-a0c3a99a175c/97b5c3cc-9aa8-4e58-b683-0ae35c36eee4/ IP212.32.243.36:0 ASN#60781 LeaseWeb Netherlands B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/lc/6a476513-f921-4df6-b648-067c78c1891c/752e82f5-25e2-47d8-a986-a0c3a99a175c/97b5c3cc-9aa8-4e58-b683-0ae35c36eee4/ HTTP/1.1
Host: email.emarketingsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Location: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Vary: Accept
X-Frame-Options: DENY
Referrer-Policy: no-referrer
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Server-ID: 2
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Accept, Cache-Control, X-Requested-With
Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT
Date: Tue, 27 Sep 2022 04:49:09 GMT
Content-Length: 0
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.35 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 04:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RJIcg_L5JMoDKCpZC1F9pkkdi9YWBiRoBkGjDuTSxuu3l_k9odtR3g==
Age: 2019
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd2560f62890e75b8de444fed96c22f52 334ce0c48e606ee029f31eeb1463af87b1024bb9 4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3027
Expires: Tue, 27 Sep 2022 05:39:36 GMT
Date: Tue, 27 Sep 2022 04:49:09 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.25 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.25:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
date: Mon, 26 Sep 2022 09:17:07 GMT
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eYtdVSaOnfNvg9aMpsmhn10r_IzDCjjOQ603XX37WeWzaXfr8jO5VQ==
age: 70323
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 04:49:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6d5b43b28da4b778aa22eab164647666 e1eba766409dc5826e7de3b1b096cb3358ae567e 911713fce6969e93cade6f1235217646894bf0bf7114c7dc6a175b3c4f6a4f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "911713FCE6969E93CADE6F1235217646894BF0BF7114C7DC6A175B3C4F6A4F29"
Last-Modified: Mon, 26 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21411
Expires: Tue, 27 Sep 2022 10:46:01 GMT
Date: Tue, 27 Sep 2022 04:49:10 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.35 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 04:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 04:56:55 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R_3uhj_Mm2q14wuWPSud7hXzrK5lx9ilSmczLtkLkiQS7R-JwavLzQ==
Age: 2304
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash5adb7eb1d103eadeeafac36e663ffdd3 23b784388dd634fa736cd60aed71570661e73d02 5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6077
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:10 GMT
Last-Modified: Tue, 27 Sep 2022 03:07:54 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.215.56.181 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.215.56.181:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SbNu/tBjy0Rf5MjtPYEZCw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wARLyZX0zDz3ncLn8uGoqWu/QXM=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashbfc8c650e23854f708a3dd54fca4393f b54c061cf5a5306a68112d403471914e839a68c8 84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashbfc8c650e23854f708a3dd54fca4393f b54c061cf5a5306a68112d403471914e839a68c8 84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Lato%3A300%2C400%2C700%2C900&ver=5.9.4 | 142.250.74.10 | 200 OK | 874 B |
URL HTTP/2fonts.googleapis.com/css?family=Lato%3A300%2C400%2C700%2C900&ver=5.9.4 IP142.250.74.10:0
Hash8767618604177d10ce57ffa2b6c3a4e2 990fb73097ac02d8a82a32b69b07627b346d0b91 67e336136e4dc6f3c5d2ad3449539f72a735c3a2c850fc9398e3d86e757476d6
GET /css?family=Lato%3A300%2C400%2C700%2C900&ver=5.9.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Sep 2022 04:49:11 GMT
date: Tue, 27 Sep 2022 04:49:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc939f97c8bcbfea356e92036803714bc 608c795e7c4fb943a4db49a4e4533c41ea717023 b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.tours.com/wp-content/uploads/2018/09/lark-160x160.jpg | 104.26.3.159 | 200 OK | 11 kB |
URL HTTP/2www.tours.com/wp-content/uploads/2018/09/lark-160x160.jpg IP104.26.3.159:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Pixelmator 3.5, datetime=2018:09:01 09:09:87], baseline, precision 8, 160x160, components 3\012- data Hashc00ec56ce0ba1471e01580f2f5c33bcf 63f04ddde22d8c8144c9d3b4e12519d2533f297b 38d2a5798882567b6e5884b3b4af08448a955996d47e9376c8a67a111ea979f8
GET /wp-content/uploads/2018/09/lark-160x160.jpg HTTP/1.1
Host: www.tours.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 04:49:11 GMT
content-type: image/jpeg
content-length: 11006
cf-bgj: h2pri
last-modified: Sat, 01 Sep 2018 16:13:56 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 179
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KzYnXfnmVOhhBPYJ7TnTGjptkbSLCU%2BoHO4RSB6LlAw7AQVp141fQaBDQSRWX%2F6QG2i4YsP90sk%2BjbIEzuxIxb0fWzqcHFTGWE5o7ZjFxHz2fsmyIJjvI53bbB7qj8s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75119c810c4c0b06-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc939f97c8bcbfea356e92036803714bc 608c795e7c4fb943a4db49a4e4533c41ea717023 b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc939f97c8bcbfea356e92036803714bc 608c795e7c4fb943a4db49a4e4533c41ea717023 b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12243
Expires: Tue, 27 Sep 2022 08:13:14 GMT
Date: Tue, 27 Sep 2022 04:49:11 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12243
Expires: Tue, 27 Sep 2022 08:13:14 GMT
Date: Tue, 27 Sep 2022 04:49:11 GMT
Connection: keep-alive
|
|
| www.googletagmanager.com/gtag/js?id=G-XD2LMFJ1RJ | 142.250.74.72 | 200 OK | 65 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-XD2LMFJ1RJ IP142.250.74.72:0
File typeASCII text, with very long lines (2996) Hash40a3df141246d7b972d61431ca7b6a4f 2bc57edff3658dff43c3ba86b17a09f7de1a537d f6ed50947b2a70b6365721c01440e68de612f6fc42c0f5a97548e43520bef45e
GET /gtag/js?id=G-XD2LMFJ1RJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 04:49:11 GMT
expires: Tue, 27 Sep 2022 04:49:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64842
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12243
Expires: Tue, 27 Sep 2022 08:13:14 GMT
Date: Tue, 27 Sep 2022 04:49:11 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12243
Expires: Tue, 27 Sep 2022 08:13:14 GMT
Date: Tue, 27 Sep 2022 04:49:11 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash639785692dc29802e484e1e1d0ec86c4 cf81784351ce6302f540f491f893b44496809677 0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12243
Expires: Tue, 27 Sep 2022 08:13:14 GMT
Date: Tue, 27 Sep 2022 04:49:11 GMT
Connection: keep-alive
|
|
| www.googletagmanager.com/gtag/js?id=UA-1769750-1 | 142.250.74.72 | 200 OK | 42 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-1769750-1 IP142.250.74.72:0
File typeASCII text, with very long lines (1720) Hashb0b9bb09e1dd14d4cce953ea13f19f87 008bb18e4c35ebd55da74e1251a6fc057fe38494 b80a1a71c2b2ad4af0bf434184fffadb4193cb78aef2a376b351f9b57ddbe99d
GET /gtag/js?id=UA-1769750-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 04:49:11 GMT
expires: Tue, 27 Sep 2022 04:49:11 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42195
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash62e68c3cd08dd94d910507512a67e85f 3d4fa8701f17e8818c25584ef5f04bfbee8440cd 058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 25814
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-49239164-1 | 142.250.74.72 | 200 OK | 42 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-49239164-1 IP142.250.74.72:0
File typeASCII text, with very long lines (1720) Hasha416931546342cf5a84b7facd9277e5c 981f0c2ad61148c18ccbfd643006514914e0cdbc c5361c6aa7cdb593f4dceca2c38c7869702e2221d6c867b2761873287e778c84
GET /gtag/js?id=UA-49239164-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 04:49:11 GMT
expires: Tue, 27 Sep 2022 04:49:11 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42262
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3140ec95f33c36599de95b25cdade940 932c74fa24b61ee1b1c672b6c19b1e736caab8d3 f7488246ca75fddc504812f4c5944a5a2494cdb14b6ef1db5fb28beca5cff194
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9737
x-amzn-requestid: a06488e4-22bb-4149-adac-b6696ab91923
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATHzUIAMFtcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-238f1b945a8b549872c85f2a;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qkfz02g1BMeZhFonJAWyqyQ9jBnZC4i-2ZHzO2wgJBVjC4YfvtlxCA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 25814
etag: "932c74fa24b61ee1b1c672b6c19b1e736caab8d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffffd9a36-7835-4249-a213-06720f62ce54.jpeg | 34.120.237.76 | 200 OK | 4.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffffd9a36-7835-4249-a213-06720f62ce54.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf9bc23ab347b5f2e2ec15d69f41f0cf0 a92af0438aa2b6637c0f69dabd0be00b3a43caf8 4382f21ee6727d4b4d21bd7d16b1821a57d9fec6c78dbf7e74bfdfbde51ec206
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffffd9a36-7835-4249-a213-06720f62ce54.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4327
x-amzn-requestid: 59493149-3c46-42c6-96aa-92c945fb4c40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlA1HzioAMFzxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9e-5bd13d5719a119a25650f405;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5XQYaLxNwxhN9NCIoDYRbt8U-2Tsxcx-2SqPNr64Z4YV8Bk7Eayjfg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 25814
etag: "a92af0438aa2b6637c0f69dabd0be00b3a43caf8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a2c481a-abce-43aa-89a3-95cd7559102c.jpeg | 34.120.237.76 | 200 OK | 6.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a2c481a-abce-43aa-89a3-95cd7559102c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb1f571f5fdf5233ffa70132a4504d4fe 1b5f002272083d5e19b5bd18d503f49635b771e5 4563ffe63e1d043c159648a72d9f4c59a3b0fe40379254848a52c11a4f1a6511
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a2c481a-abce-43aa-89a3-95cd7559102c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6518
x-amzn-requestid: 6dfcf2e6-a528-47aa-8ae8-7857f08dac7c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y13ElHLzIAMFetw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632bd21d-1317b6f73d15a209545f80d6;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 03:10:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Eh_pKXNcEmAVXN5vl2i9chmz6U-PtBHTLfS04OSmkuYa7-e2vVl7nw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 18:10:41 GMT
age: 38310
etag: "1b5f002272083d5e19b5bd18d503f49635b771e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff092f2d0-abd6-40d2-ad33-9fb0ded1ec0a.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff092f2d0-abd6-40d2-ad33-9fb0ded1ec0a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash91d97447a6a35813e57d942f685544c4 3b660de9902fbfcf2efb477f40480b08545ebc5f 08c1ea19c4918273da12c9a2e962edf4463c486a30f60c8a279a45e5edcf972a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff092f2d0-abd6-40d2-ad33-9fb0ded1ec0a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11881
x-amzn-requestid: 584a2270-56ef-4f46-8ab2-dc0e519b5f45
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YshLfEfoIAMFX9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328157c-12f8e8e31318d2da70796520;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 07:08:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bDpP2pZgrMz5bH_vy76SvyPojDGhPIHfOtv2i4dfHCs1GUuSZVC87w==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:33:24 GMT
age: 22547
etag: "3b660de9902fbfcf2efb477f40480b08545ebc5f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfa70ece15044b7318cb11ae5e37a64e7 04a0665f771562c3e56ac3542abe5bd3c4c1a6b5 8c974283b2ba0058114404af3e4818daa8cc56f270cb8a46f5f2f54de9d2f0e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8255
x-amzn-requestid: 3bf29c4a-406a-4645-ad18-44cd6f05d457
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VnFEV-IAMFQMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfc6-3eaa337d1e1c1b6d5e951419;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: X-6P09-hgjmDFe4Y7P1KnXtJAuvJNen8XsBVIexf521SOxMivJ4t7A==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 17:53:33 GMT
age: 39338
etag: "04a0665f771562c3e56ac3542abe5bd3c4c1a6b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc939f97c8bcbfea356e92036803714bc 608c795e7c4fb943a4db49a4e4533c41ea717023 b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.travel-intel.com/wp-content/themes/Travelo-child/style.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 84 B |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo-child/style.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashc53e5e59375a8832ad32c9eab7aa6650 a9ae41b78c7d5764d441ae5d5dca231b7e793aef 8ac6e5d43cf08ea20de599d8d5234379252cb3fef66c55f84b3e080b624f4980
GET /wp-content/themes/Travelo-child/style.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 Apr 2017 13:31:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 84
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/jquery-archive-list-widget/assets/css/jal.css?ver=5.0.1 | 198.57.151.22 | 200 OK | 485 B |
URL HTTP/2www.travel-intel.com/wp-content/plugins/jquery-archive-list-widget/assets/css/jal.css?ver=5.0.1 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash0d0a71c22686bd952bdab574e7238010 2b6871ef455293ae1b8d9bf45629152df1c306f0 c53d9168000a01e5be1351981edd949a6ec7999203a5dc5cf7f8d7f832ffd625
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/jquery-archive-list-widget/assets/css/jal.css?ver=5.0.1 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Jun 2022 21:49:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 485
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/style.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 412 B |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/style.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash029774c95d94ce1db1c93c60cdd64e68 4bce6fd1bbab3928638d98a08884cf63d082b11d 124e3ca020e9d611c018902c4ea7528f23a7514fa824c878454bba6376ed30d9
GET /wp-content/themes/Travelo/style.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 412
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/components/flexslider/flexslider.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 1.9 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/components/flexslider/flexslider.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashc0e61fd403389fe0c66270fd8fc82412 d5e6d904e2e1596649b07a2753dceba644dae822 8ae249f6321f9241c32e33193eef46f4ca5b587b52e7cd03e21aba930f4adb7f
GET /wp-content/themes/Travelo/js/components/flexslider/flexslider.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1890
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/a-z-listing/css/a-z-listing-default.css?ver=4.3.1 | 198.57.151.22 | 200 OK | 1.2 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/a-z-listing/css/a-z-listing-default.css?ver=4.3.1 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash58d3a71a62891a8c3b19a07109a59d7d c599fc92e8299f5233430eeaa7d5796263b6e791 7eb391a354a12d26902ea526d398a7c4fe8141adbe0ae691aceadb108b1a0e2b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/a-z-listing/css/a-z-listing-default.css?ver=4.3.1 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:06:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1162
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/css/animate.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 5.8 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/css/animate.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (58976), with CRLF line terminators Hashc6b584456bd018258c48cd751abf6aae f505fcd8295805193c4faaaffc262b21949af0de cffc5417e72893e1b978b4db726c6cbc125937e59c29200badd9c788368efdfc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/css/animate.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5832
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/css/font-awesome.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 4.1 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/css/font-awesome.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (17618) Hash1bdf51cbf272d57f78fa3c56849279ac a4e227bced43dfdebb4b0a9cf5d1dd4dd5c63857 ac1dc14af7a7d666cb2d6074a18f33efc36ce34f5646e7fb7605ac897f2c48c3
GET /wp-content/themes/Travelo/css/font-awesome.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4074
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 16 kB |
URL HTTP/2www.travel-intel.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (39791) Hashf9ff11f74e8529779b6d0a398d76be89 e6369c832d137f60420b232d6b8662cd65a50496 4e1528494bebb5f06ecdcb19fe8163aa967b12ff04ce04ec3badcb957433a3c7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Apr 2022 23:50:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16047
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/css/custom.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 1.0 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/css/custom.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash2763cc7144cb725553b7239d9976b737 dcd485dd3ee3a5f47ffc2a864573fee90fed1129 a05c4a8c262c3d992d3f9c523b694d729f744e44ab1b9844caf1e1ed1e1e03b9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/css/custom.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1034
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/elementor/css/global.css?ver=1662504512 | 198.57.151.22 | 200 OK | 1.1 kB |
URL HTTP/2www.travel-intel.com/wp-content/uploads/elementor/css/global.css?ver=1662504512 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6697) Hash7925a5df5ac6e4c7abb8d166d2d59e79 5a01c01c75e565a3248d9736b1dbf3d8e538034c 22d0e4d10ed3b16e146e95047de05f9033bdd9c8b646ee9ff3fb7b60ceb6035c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/global.css?ver=1662504512 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:48:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1122
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.timepicker/jquery.timepicker.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 456 B |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.timepicker/jquery.timepicker.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashf31b6ba79ae27bb9c867846f2d7a829a 3aea34dab698c689101f9ac732ead684344a90b2 c9bd50b2b49ec83c75ddcad2459f3c61f5cc2a628227e082634860e3e1f2ed0d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/components/jquery.timepicker/jquery.timepicker.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 456
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/elementor/css/post-18812.css?ver=1662504511 | 198.57.151.22 | 200 OK | 359 B |
URL HTTP/2www.travel-intel.com/wp-content/uploads/elementor/css/post-18812.css?ver=1662504511 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1121), with no line terminators Hashe5baf2c02dc1ae18e33db0e6f732c82d badaad3744ad2e37efcf3722f4e5f52691700908 3e0ae398ceac9bda70fab664147b0e24df8692354b32f353b3c3ede70941a5e6
GET /wp-content/uploads/elementor/css/post-18812.css?ver=1662504511 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:48:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 359
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 5.2 kB |
URL HTTP/2www.travel-intel.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15224) Hash00af0ddf324f69fcb25f0d2e5d08910a df0379ab0e1b2902957c8aba77f89d88e1239b59 f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 08 Jan 2022 01:01:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5243
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.bxslider/jquery.bxslider.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 1.4 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.bxslider/jquery.bxslider.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash891dda32a80d40f3a6959cdc5f7cc1ae 8f0c5d48a11c60c77d79c906e78c903c311d4462 56ac0da0ce487cf94e4ae63ca09d3a43f1f0f4b141580f2dd9844c763ad833fe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/components/jquery.bxslider/jquery.bxslider.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1352
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/css/main.css?ver=1.2.7 | 198.57.151.22 | 200 OK | 2.0 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/css/main.css?ver=1.2.7 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash720229379035f748a11f4d31945face2 69f3b86f50bc5b23eaf5f0a6ee9e468ee5c14299 97950f4afa7e769fc579b2cd14b2cc48fa52655cb63395b6f1d19cde8d1d80e6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/meks-easy-social-share/assets/css/main.css?ver=1.2.7 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 08 Mar 2022 21:55:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2026
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/css/responsive.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 3.9 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/css/responsive.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (16246), with CRLF line terminators Hashe4dd4bfed5dd42a62e9fc8efa08770de 9af97c5e0890cb25ef461d938c80d05cdb49a229 0c45d3e094bba1d256703e17a681993e81758a98de4ed6d98453dcbde491a433
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/css/responsive.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3933
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 | 198.57.151.22 | 200 OK | 4.0 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19233) Hash2701214b028ad24fa347df8335b36d12 156bc8a7ad2657f00881890637f07c6052636499 9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:34:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4008
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 198.57.151.22 | 200 OK | 4.6 kB |
URL HTTP/2www.travel-intel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 08 Jan 2022 01:01:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/js/main.js?ver=1.2.7 | 198.57.151.22 | 200 OK | 323 B |
URL HTTP/2www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/js/main.js?ver=1.2.7 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash522af4afe3613c318e064eadf1f3862f baebb4aa34922ff85039bc9f22cdcbc224ea4142 f4b69fcd1fb37acc96165cea634bec1ff4e60c539715ec4e48df6586703945c8
GET /wp-content/plugins/meks-easy-social-share/assets/js/main.js?ver=1.2.7 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 08 Mar 2022 21:55:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 323
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/jquery-archive-list-widget/assets/js/jal.js?ver=5.0.1 | 198.57.151.22 | 200 OK | 1.5 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/jquery-archive-list-widget/assets/js/jal.js?ver=5.0.1 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash0bd99b8c335b7bc0bf4fab26c816f6b9 c4490f5d3051095d7ad2d3e056c17996c61b0187 4f7e8e555c021c25901d390bd647c1b206f87d32158d21a930728ae093e580a7
GET /wp-content/plugins/jquery-archive-list-widget/assets/js/jal.js?ver=5.0.1 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Jun 2022 21:49:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1502
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/map.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 1.3 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/map.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with CRLF line terminators Hash90aefbaf877f520bb20713b41caac496 16ef0a6ffd4daaee528f61a57a21b19c44fdf5e2 dde03cbca893d9dcfd00965b67e97c236a7fea3acc02516de5da751d74976501
GET /wp-content/themes/Travelo/js/map.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1313
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/gallery-lightbox-slider/css/photobox/photobox.css?ver=1.0.0.39 | 198.57.151.22 | 200 OK | 4.1 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/gallery-lightbox-slider/css/photobox/photobox.css?ver=1.0.0.39 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (352), with CRLF line terminators Hash5180167faeabecaa22cd7fc1da929df4 ab24bc22e05a000080818aa036273db4326283a4 976e5d6b00aadbd1fd312cc226f64e904f1a16171a1a42fde21cb92d4e6c8cd3
GET /wp-content/plugins/gallery-lightbox-slider/css/photobox/photobox.css?ver=1.0.0.39 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 23 Jan 2022 21:47:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4051
content-type: text/css
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.4 | 142.250.74.10 | 200 OK | 7.1 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.4 IP142.250.74.10:0
File typeASCII text, with very long lines (16662) Hash1572ea744557eab69fbbcd5d9f77ffdd 0b43d6def899ec110b900305330292e0a38f8292 84321e14e3bbca893a94b41bc56e89ef5ac44e0c1b46083018cf3445f07b4e05
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.9.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Sep 2022 04:49:11 GMT
date: Tue, 27 Sep 2022 04:49:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4 | 198.57.151.22 | 200 OK | 2.3 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4918) Hashade58b4bc50a3603c7ef8c00e94a3c94 b3447ed5f0a8e66b73e0252bdcaa3e858c88686e b8f350a014ec37cf6d952761896b4bd3ee0527212abd1cb1400b56be50095cfb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:34:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2313
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/gmap3.infobox.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 2.7 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/gmap3.infobox.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (5623), with no line terminators Hash29503b5090a78ef71cc9df40d9f51051 1f1e7a94d27b6fa2e9414224906c5c2387d969cf 04b0b653c9265bee78407145733e48739be97fdff0183a46ac3ceff881b5b357
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/gmap3.infobox.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2681
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 198.57.151.22 | 200 OK | 3.7 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (12198), with no line terminators Hashe2a8decccf4d0a6b925af707a36077a9 26a0febc9c3d91e75410f74b9ec62099ba1cbe90 09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:34:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.bxslider/jquery.bxslider.min.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 6.4 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.bxslider/jquery.bxslider.min.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19040) Hash3c45b35ba504f57470e6afd4358b3c89 7c57a5643b0eeb524f8ca9bd2eac1c517aba5ac8 9de6c9850e592a77c1b0722dc70fc86ac4c61c7b76461174c5effbce5b11ed31
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/components/jquery.bxslider/jquery.bxslider.min.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6375
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/2022/07/T-I-Logo-500-Canva-JPG-smaller.jpg | 198.57.151.22 | 200 OK | 12 kB |
URL HTTP/2www.travel-intel.com/wp-content/uploads/2022/07/T-I-Logo-500-Canva-JPG-smaller.jpg IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 300x300, components 3\012- data Hashde3c41d0a3de6aa3b28ea1105337a7bc c827178e868531d580fd22edbda0846cefd12d0e 2215db9108c4677f12aa3716a0cefd0dfe058d10bf23a1e14f955db5046aba32
GET /wp-content/uploads/2022/07/T-I-Logo-500-Canva-JPG-smaller.jpg HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 22:44:11 GMT
accept-ranges: bytes
content-length: 11881
content-type: image/jpeg
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash737756d717fd215d94458a21028ae486 ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f 8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash737756d717fd215d94458a21028ae486 ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f 8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash737756d717fd215d94458a21028ae486 ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f 8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash737756d717fd215d94458a21028ae486 ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f 8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 142.250.74.163 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.travel-intel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 560334
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.travel-intel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 465307
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 | 142.250.74.163 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Hashde69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.travel-intel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 560334
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.travel-intel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 465307
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/jquery.validate.min.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 8.3 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/jquery.validate.min.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (21388) Hash30ebfb86fbd26e033936389d27f88964 9c5fcc9d77ea4b139a705f4d7f7eea5bba57e960 32d5addd54eeab425c0be618007204fd5e02f57f182de84f0bfa8cabe3ba4ac1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/jquery.validate.min.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8257
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash737756d717fd215d94458a21028ae486 ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f 8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 04:49:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.travel-intel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 | 198.57.151.22 | 200 OK | 8.1 kB |
URL HTTP/2www.travel-intel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash4cdacddd7ddb8e34cdc428be2f12ee99 dccf8409d825f49557c40a467c0d3052f4c14923 bd13cfedef2490fbfdcecac80b24ad0f13fd9741bff3ebeb20a49b87d947a141
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Apr 2022 23:50:35 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8137
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/components/flexslider/jquery.flexslider-min.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 8.5 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/components/flexslider/jquery.flexslider-min.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (22239) Hash5db8562802821289ab63d114d733414e 5c075e0ec89032bd2a54f0607302f9c1c409babf da4399fe01b68e895b80281f8d34db1150a2ccc5e54989f8a28ebf61f34b6e4c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/components/flexslider/jquery.flexslider-min.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8515
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/plugin.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 9.4 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/plugin.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (12453), with CRLF line terminators Hash5f4f4b56a45524504ecaf0786c27816d 7085aa34a7be00fe1cfb3b5a0c0855461fd7dee2 2729c65bc7733c33c6846f08edba9f2400472c57f24b618af37d8d32389a5d24
GET /wp-content/themes/Travelo/js/plugin.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9408
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/bootstrap.min.js?ver=3.0 | 198.57.151.22 | 200 OK | 11 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/bootstrap.min.js?ver=3.0 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (28995) Hash594f934463610f97ff78113c196d5f0d 1fde5029757251e9bfcf1064853a3d53723ec274 751b0496a5f4ec5cd3eea93a40d89478a86761c6a0514bf445935a26163ed4d2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/bootstrap.min.js?ver=3.0 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11118
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/gmap3.min.js?ver=3.0 | 198.57.151.22 | 200 OK | 11 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/gmap3.min.js?ver=3.0 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (24891) Hash2a285eacac54d22d93ea3cba3ac8114f 3fc4e8361c11c73c5c11d08297b0900e5520d7d2 3c5860c5872f984c56a6491060a2731ad1ca4a32be2eb5dd62930cb5fe8341a0
GET /wp-content/themes/Travelo/js/gmap3.min.js?ver=3.0 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10585
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.timepicker/jquery.timepicker.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 11 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/components/jquery.timepicker/jquery.timepicker.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashcad31018ab7a89ca1da5257b612e51b3 dfec502d27d34e9714058a0886f55992c28552d7 d1de0988bc791cfaa274eb92a0087a3f3e49e9cca4f3264c70f7b12392694e92
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/components/jquery.timepicker/jquery.timepicker.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10888
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4 | 198.57.151.22 | 200 OK | 13 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (32889) Hashc764cb7a1a15ff10f87d4cffd828a1c2 f560e7d0873dbdf4df607ecd76232832689a7de4 72e40d8a22973f601fb4e89e9fa3ede7eb3ef6156fd0a8ea96d90b8d4a44fa6d
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:34:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13281
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4 | 198.57.151.22 | 200 OK | 16 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (40474) Hashac6c8aee88f098bc9d95d60f54eaced8 c519c2a8b2c283fe83bc1d7f23a7968442bddf7f 1c46c61e457d5ffabb844ccfb6fd0ae1a387162f48a48cdc09e868089566ccae
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:34:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16151
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/gallery-lightbox-slider/js/jquery/photobox/jquery.photobox.js?ver=1.0.0.39 | 198.57.151.22 | 200 OK | 16 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/gallery-lightbox-slider/js/jquery/photobox/jquery.photobox.js?ver=1.0.0.39 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2573) Hash80ae86117c8103fa4a3cf062aa619cf6 e839708a7a625334cde0a5905b57727baba6cf18 57a73ae525060580f1d8ec921b798a8f9c343945961ac7643bc0ef2de93d79a8
GET /wp-content/plugins/gallery-lightbox-slider/js/jquery/photobox/jquery.photobox.js?ver=1.0.0.39 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 23 Jan 2022 21:47:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15631
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/fonts/socicon.woff | 198.57.151.22 | 200 OK | 101 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/fonts/socicon.woff IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format, TrueType, length 100756, version 3.6\012- data Size101 kB (100756 bytes) Hash33811ce5483b18b438a30b6d587b1300 1fe45b48089cd3709012eb89cf2177ebbbd72d91 48c273dcbed09b6b87f9365f2f141063f5c859476b53913d94fca1befe90aa0c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/meks-easy-social-share/assets/fonts/socicon.woff HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.travel-intel.com/wp-content/plugins/meks-easy-social-share/assets/css/main.css?ver=1.2.7
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 08 Mar 2022 21:55:03 GMT
accept-ranges: bytes
content-length: 100756
content-type: font/woff
date: Tue, 27 Sep 2022 04:49:15 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-XD2LMFJ1RJ>m=2oe9l0&_p=435154126&gdid=dZTNiMT&cid=655541866.1664254154&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664254153&sct=1&seg=0&dl=https%3A%2F%2Fwww.travel-intel.com%2Fcanceled-flights-airline-delays%2F%3Fcmid%3D6a476513-f921-4df6-b648-067c78c1891c&dt=Those%20Canceled%20Flights%20Get%20Attention%20from%20DOT%20-%20Travel-Intel%20Travel%20News&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-XD2LMFJ1RJ>m=2oe9l0&_p=435154126&gdid=dZTNiMT&cid=655541866.1664254154&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664254153&sct=1&seg=0&dl=https%3A%2F%2Fwww.travel-intel.com%2Fcanceled-flights-airline-delays%2F%3Fcmid%3D6a476513-f921-4df6-b648-067c78c1891c&dt=Those%20Canceled%20Flights%20Get%20Attention%20from%20DOT%20-%20Travel-Intel%20Travel%20News&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-XD2LMFJ1RJ>m=2oe9l0&_p=435154126&gdid=dZTNiMT&cid=655541866.1664254154&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664254153&sct=1&seg=0&dl=https%3A%2F%2Fwww.travel-intel.com%2Fcanceled-flights-airline-delays%2F%3Fcmid%3D6a476513-f921-4df6-b648-067c78c1891c&dt=Those%20Canceled%20Flights%20Get%20Attention%20from%20DOT%20-%20Travel-Intel%20Travel%20News&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.travel-intel.com
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.travel-intel.com
date: Tue, 27 Sep 2022 04:49:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/fonts/soap-icons.woff?26664784 | 198.57.151.22 | 200 OK | 42 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/fonts/soap-icons.woff?26664784 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format, TrueType, length 41836, version 1.0\012- data Hash7351b5d5f8f144235fd78db7645854d3 b1039a7b36a939ba13188c52be85704f061b591d 6cb6f6696b688267834f7f7b01bbf0b06ec864ab3c5ec4895c0bf8e9e8464d83
GET /wp-content/themes/Travelo/fonts/soap-icons.woff?26664784 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.travel-intel.com/wp-content/themes/Travelo/css/style-dark-blue.min.css?ver=5.9.4
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
content-length: 41836
content-type: font/woff
date: Tue, 27 Sep 2022 04:49:15 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/2022/03/IP-eyes-8-300x114.jpg | 198.57.151.22 | 200 OK | 21 kB |
URL HTTP/2www.travel-intel.com/wp-content/uploads/2022/03/IP-eyes-8-300x114.jpg IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Macintosh, datetime=2005:01:24 17:22:06], baseline, precision 8, 300x114, components 3\012- data Hashb7f2b6ee516c22234c2f80fca0cfee18 081b5b49d7887cd0e41d5c19dae47ba1e019585e f2c9c8c8e1fc2b32c60ccd7f9be05b45ca9b6bf4c8739366233899d774049c43
GET /wp-content/uploads/2022/03/IP-eyes-8-300x114.jpg HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Mar 2022 22:24:13 GMT
accept-ranges: bytes
content-length: 20609
content-type: image/jpeg
date: Tue, 27 Sep 2022 04:49:15 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| secure.gravatar.com/avatar/c073377a4cae0fa182309e31e463c891?s=96&r=g&d=https://www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png | 192.0.73.2 | 302 Found | 0 B |
URL HTTP/2secure.gravatar.com/avatar/c073377a4cae0fa182309e31e463c891?s=96&r=g&d=https://www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png IP192.0.73.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /avatar/c073377a4cae0fa182309e31e463c891?s=96&r=g&d=https://www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 27 Sep 2022 04:49:16 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://i1.wp.com/www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png?ssl=1
last-modified: Thu, 16 Sep 2010 04:45:40 GMT
link: <https://www.gravatar.com/avatar/c073377a4cae0fa182309e31e463c891?s=96&r=g&d=https://www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png>; rel="canonical"
expires: Tue, 27 Sep 2022 04:54:16 GMT
cache-control: max-age=300
x-nc: HIT arn 1
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hashcae538dcce82598fbe43c0bf443e62dd cc68ac6be9c5e0087a0000e5735b83270ace30f5 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Tue, 27 Sep 2022 04:41:09 GMT
expires: Tue, 27 Sep 2022 06:41:09 GMT
cache-control: public, max-age=7200
age: 487
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| i1.wp.com/www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png?ssl=1 | 192.0.77.2 | 200 OK | 780 B |
URL HTTP/2i1.wp.com/www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png?ssl=1 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash3f25c39ec5dd5c82f25e7539b77840a6 375076274fc1c50a236350df03ab2a79e3620e04 88f00003e7a7714b052291ec8dc20d2ae53d05b19b9295e7cb0ddbece0639952
GET /www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png?ssl=1 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.travel-intel.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 04:49:16 GMT
content-type: image/webp
content-length: 780
last-modified: Fri, 23 Sep 2022 14:56:05 GMT
expires: Mon, 23 Sep 2024 02:56:05 GMT
cache-control: public, max-age=63115200
link: <https://www.travel-intel.com/wp-content/plugins/userswp/assets/images/no_profile.png>; rel="canonical"
x-content-type-options: nosniff
etag: "2b73bf76296ebfd3"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/jquery-ui.min.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 23 kB |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/jquery-ui.min.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (32075) Hash85a70750a58d57170c892c62a710c440 15c98bbf402553209c54a98e7455f2945f455aa9 13f25abb318f5efccf7536fe3b2f37497ec5833af2cd558488be38110a01c710
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/jquery-ui.min.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.4 | 198.57.151.22 | 200 OK | 31 kB |
URL HTTP/2www.travel-intel.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashbcaf8ac5342c88ef93c072bd1731838c 292dc9e0d5864d1ead6ce15e21023a9728705d61 e7d708158f8e18a1fb7dc3de9c909706e59d224c1700375cceaca705fb673f2c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 22:34:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/2022/06/Travel-Intel-logo-new-wo-arrow-45x45.png | 198.57.151.22 | 200 OK | 1.9 kB |
URL HTTP/2www.travel-intel.com/wp-content/uploads/2022/06/Travel-Intel-logo-new-wo-arrow-45x45.png IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced\012- data Hash860f23a187813e9cb08358370c0e6862 81307fce027ec0078a78fbd91c0bd4d7f4a174a6 d72e9de810c26996e4ff5feb144a0dcc5d687332c192e1a5a5d55c76b5bc1053
GET /wp-content/uploads/2022/06/Travel-Intel-logo-new-wo-arrow-45x45.png HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a; _ga_XD2LMFJ1RJ=GS1.1.1664254153.1.0.1664254153.0.0.0; _ga=GA1.1.655541866.1664254154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 17:27:29 GMT
accept-ranges: bytes
content-length: 1888
content-type: image/png
date: Tue, 27 Sep 2022 04:49:16 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/2022/09/cancelled-flight.jpg | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/uploads/2022/09/cancelled-flight.jpg IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2022/09/cancelled-flight.jpg HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 20:01:28 GMT
accept-ranges: bytes
content-length: 994080
content-type: image/jpeg
date: Tue, 27 Sep 2022 04:49:15 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/css/ayecode-ui-compatibility.css?ver=0.1.72 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/css/ayecode-ui-compatibility.css?ver=0.1.72 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/css/ayecode-ui-compatibility.css?ver=0.1.72 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Sep 2022 21:21:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pingback: https://www.travel-intel.com/xmlrpc.php
link: <https://www.travel-intel.com/wp-json/>; rel="https://api.w.org/", <https://www.travel-intel.com/wp-json/wp/v2/posts/20296>; rel="alternate"; type="application/json", <https://www.travel-intel.com/?p=20296>; rel=shortlink
set-cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 04:49:10 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/css/bootstrap.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/css/bootstrap.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/Travelo/css/bootstrap.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/js/select2.min.js?ver=4.0.11 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/js/select2.min.js?ver=4.0.11 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/js/select2.min.js?ver=4.0.11 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Sep 2022 21:21:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/uploads/2022/05/image.gif | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/uploads/2022/05/image.gif IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2022/05/image.gif HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 21 May 2022 19:43:54 GMT
accept-ranges: bytes
content-length: 614893
content-type: image/gif
date: Tue, 27 Sep 2022 04:49:15 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/css/style-dark-blue.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/css/style-dark-blue.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/Travelo/css/style-dark-blue.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 08 Jan 2022 01:01:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/js/bootstrap.bundle.min.js?ver=0.1.72 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/js/bootstrap.bundle.min.js?ver=0.1.72 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/userswp/vendor/ayecode/wp-ayecode-ui/assets/js/bootstrap.bundle.min.js?ver=0.1.72 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Sep 2022 21:21:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-content/themes/Travelo/js/theme-scripts.js?ver=5.9.4 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-content/themes/Travelo/js/theme-scripts.js?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/Travelo/js/theme-scripts.js?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jun 2018 19:36:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 27 Sep 2022 04:49:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.2.0/css/all.css?wpfas=true | 172.64.132.15 | 200 OK | 0 B |
URL HTTP/2use.fontawesome.com/releases/v6.2.0/css/all.css?wpfas=true IP172.64.132.15:0
GET /releases/v6.2.0/css/all.css?wpfas=true HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 04:49:11 GMT
content-type: text/css
x-amz-id-2: 424BeOSkC6hGYlHqD3fVyXP+HrmwDbBID90BCrP2mzdJOYpNx83NmInOwgine/ho3PO0W4gdj40=
x-amz-request-id: 9QJAXRAHB2XMM6MR
last-modified: Tue, 30 Aug 2022 16:39:37 GMT
etag: W/"6cb5a85b30082e3d59d7e371e002ce8d"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2273562
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V%2B%2BHeHLgDjNeIBDt605CENxo6tpM%2F3vi5dWMuNgNiZpyopJbqv2g%2F%2FabIVslUNDYCYQdGmpRhGAn0dwe04mvk6bj8LYAxBO6qwO78wlR4dzD1qyLPuveFSY%2BQJlG72LkKvT5%2FqnP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75119c7facb176e3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.travel-intel.com/wp-includes/css/dashicons.min.css?ver=5.9.4 | 198.57.151.22 | 200 OK | 0 B |
URL HTTP/2www.travel-intel.com/wp-includes/css/dashicons.min.css?ver=5.9.4 IP198.57.151.22:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/dashicons.min.css?ver=5.9.4 HTTP/1.1
Host: www.travel-intel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.travel-intel.com/canceled-flights-airline-delays/?cmid=6a476513-f921-4df6-b648-067c78c1891c
Cookie: PHPSESSID=9183249aedf91208649c0dd8af08c30a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 08 Jan 2022 01:01:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 27 Sep 2022 04:49:11 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
0.0.0.0