r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6599
Expires: Wed, 01 Feb 2023 07:00:26 GMT
Date: Wed, 01 Feb 2023 05:10:27 GMT
Connection: keep-alive
ingenioustravel.com/
302 Found 212 B IP
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9ebab2cf4de7cf5b15ca3b27e1922e94
52de9d82d1dfb63536bd175404fc1fefd32cbe3a
2e654a52d96a2583098d425acf2d477aebfd45ef20a72bb4f23c23650c464831
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 01 Feb 2023 05:10:27 GMT
Server: Apache
Location: https://ingenioustravel.com/
Content-Length: 212
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18949
Expires: Wed, 01 Feb 2023 10:26:16 GMT
Date: Wed, 01 Feb 2023 05:10:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 04:35:57 GMT
content-type: application/json
age: 2070
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4243
Expires: Wed, 01 Feb 2023 06:21:10 GMT
Date: Wed, 01 Feb 2023 05:10:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BMPg4uyU2GJpW5CLTFav0vseTsoGTEwIWAEt+S4N6n7xp1WIOk+RXGHiEw/wehhtOsdm8Su6i80=
x-amz-request-id: 4H0JVT8M3Q6X6VT9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 04:51:26 GMT
age: 1141
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 05:10:27 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 04:41:42 GMT
age: 1726
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8538
Expires: Wed, 01 Feb 2023 07:32:46 GMT
Date: Wed, 01 Feb 2023 05:10:28 GMT
Connection: keep-alive
ingenioustravel.com/
301 Moved Permanently 1 B IP
ASN #398101 GO-DADDY-COM-LLC
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-powered-by: PHP/8.0.26
x-redirect-by: WordPress
location: https://www.ingenioustravel.com/
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Wed, 01 Feb 2023 05:10:28 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pw3kTwZEYLH9l7/0d1G3xw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: y97vMTVrh2CJ06zDnNSCxiDgMmo=
www.ingenioustravel.com/
200 OK 18 kB IP
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash b3d117819fbe570d3b3f5252b108e18f
366c66e84eb63cac424073bc9e292de99cd03ea7
5accd495bee184759fe31e47fee09a4ace18ddc2124cf4e546701e2b3c335508
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/8.0.26
link: <https://www.ingenioustravel.com/wp-json/>; rel="https://api.w.org/", <https://www.ingenioustravel.com/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json", <https://www.ingenioustravel.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: br
content-length: 17600
content-type: text/html; charset=UTF-8
date: Wed, 01 Feb 2023 05:10:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js?ver=6.1.1
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (32072)
Hash d38e2944bbc9ae54b8947a2bd0b9a932
782a825679b248d38979c2d7ecae257873344437
65a0917567cb7037612cf420629873f2f3594d2e741aaadf90d893d07d8f5fdd
GET /ajax/libs/jquery/1.10.2/jquery.min.js?ver=6.1.1 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32954
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 01:45:43 GMT
expires: Fri, 26 Jan 2024 01:45:43 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 530686
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 922f9d6bcf11f0c5d95ed837590aed8f
bd2430f5de52cb9eed7ff07fe12faa831d3c6ee1
17657482c1577b20b1f0931a1d7e6e51130053f7b96ba2b4c1baf9da1541cc63
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1434
Cache-Control: max-age=126129
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:29 GMT
Etag: "63d9385c-118"
Expires: Thu, 02 Feb 2023 16:12:38 GMT
Last-Modified: Tue, 31 Jan 2023 15:48:44 GMT
Server: ECS (amb/6BB3)
X-Cache: HIT
Content-Length: 280
www.ingenioustravel.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 145 B URL HTTP/2 www.ingenioustravel.com/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 2dfb9ddeabe846b150087876ceb22a74
c9e3350631e53855d04d6dce360a675c84b3131d
26ef5cb63a695419cf11c79a759b46c5568df3716e4f1d36e7612b3695d5b554
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 13:45:16 GMT
etag: "621228-d9-5ebdc1e39f300-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 145
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.6.1
200 OK 207 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.6.1
IP
ASN #398101 GO-DADDY-COM-LLC
Hash d4f6c13c2500adae087eec1adb83e756
ea261adbf0289e705559302fed2d46f93c00aefe
2b3f5007e969882d27001a0a4c3a1ed22edaa2faab019f668827c0ca2a25562d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.6.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 18 Oct 2022 12:38:08 GMT
etag: "29e02c1-2cb-5eb4e5d43e5fa-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 207
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1.1
200 OK 3.3 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (24704), with no line terminators
Hash 9d1b36b6265292b32ccc21b9a01690aa
134df6ed5e5a3a1fdbee232934757f6b40ba5c19
31c2c6828f195f50028e65bf2023b5d215ff7a6104d82e941bfd8f8a25f78005
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 Jan 2023 06:40:51 GMT
etag: "6a1993-6080-5f310e9d16b32-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3255
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/simply-schedule-appointments/assets/css/ssa-styles.css?ver=1.6.3.0
200 OK 190 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/simply-schedule-appointments/assets/css/ssa-styles.css?ver=1.6.3.0
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 216dcf5293c74474646045bd58487fd3
7f35933ca02f75e54ac461d23690dedfc39fe5b2
37f329af3fec598064facf3b37ed1e8402d926687d878c560a352acc19b2a50c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/simply-schedule-appointments/assets/css/ssa-styles.css?ver=1.6.3.0 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 11 Jan 2023 12:38:22 GMT
etag: "1fe0ff7-141-5f1fc469b82a9-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 190
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
200 OK 1.7 kB URL HTTP/2 www.ingenioustravel.com/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (6051), with no line terminators
Hash 5e0b2191d8c3109b229ac78f4f6c03f4
48743eaf077707bafbfefb43eae465e327c9d829
81af445c58fafc3ab2e16fa448ee0293c161f89fa4528875f9f4eaec83fb4716
GET /wp-content/themes/hello-elementor/style.min.css?ver=2.6.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Jul 2022 12:37:45 GMT
etag: "62041a-17a3-5e39aef722fc4-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1711
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ingenioustravel.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (47826)
Hash 5e3752655a7a33c049db06c0edf386e6
573c51b0de413f30a220c9261506635f9daf2b81
d6571c641370e9bb83b25b5a493fca6ae3109ae384f7a8a9507ccdfb9067627d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 14:56:45 GMT
etag: "621255-172a9-5ed33192c4540-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 11590
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
200 OK 2.4 kB URL HTTP/2 www.ingenioustravel.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15672), with no line terminators
Hash ff99987e3165ac46ccf3383c554ccba6
3e0cf43001cff220154c0aaff7cbdfb346161ac5
8f42e21a1b6e1732cba87365d4c5e70b1f88a1cadb0aac98b43994d039133a85
GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Jul 2022 12:37:45 GMT
etag: "62042f-3d38-5e39aef7233ac-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2422
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.10.1
200 OK 625 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (9895)
Hash cb022394a86ae34e732fdd89f7254ee8
ed903c6fb5fad94b243e8d8da3ec071665b989aa
f664b2e3b4f5ef02507a0c249656d7aed62537bf254987530030d87f150a0c10
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0bc3-26cf-5f27f0ea23822-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 625
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.5.3
200 OK 722 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.5.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3508)
Hash 0d5d1bc7add5ed29c704d13242e965c3
c22104d73015d3eadf8b7b74b6a11c314402d4fc
92b6b1f714633ea5088f4cd0a79c6f8abb4a437413629df3a21972faab82a1c1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.5.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Jan 2023 00:40:42 GMT
etag: "a203ec-db5-5f31fffa477f9-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 722
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.10.1
200 OK 18 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65496)
Hash 2b8b9f8731a35bdfa9ea905192f675d9
4f68b19e507c4f3fe7f0f89bbcd2bd2b6a1e90ce
f323443ac0fcb92d15e79978c22c5364cb7e4faeb34709262cb00bf527cfd36a
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0bbf-23dbd-5f27f0ea23822-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 17859
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
200 OK 286 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (489)
Hash 2b7c6eba3b8212fe30d7a7dd72bf5ec0
4b9eeadd72a2f84ffa0ac1faa862b103d4db27eb
e8b697c24b3850f312710651bfdf47bae0474e57753ed47b113cf4998c08b055
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ae0-2a3-5f27f0ea19fc9-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 286
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 286 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (483)
Hash 4f30a25d397b1ed3d5af16d168df48d0
67ba90f82a44e2c3a461e0303ecbd6f4ef157cc1
3471391e766a778b02e6a839f52b2f068a2e4069b37bf6ac9694735e2c24b7f8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ae2-29d-5f27f0ea1a3b1-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 286
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/sticky-header-oceanwp//main.js?ver=1.0.0
200 OK 567 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/sticky-header-oceanwp//main.js?ver=1.0.0
IP
ASN #398101 GO-DADDY-COM-LLC
Hash f55e7353c2287ddaaa9aa265f474456a
d00a6a0cd6506dab4780893f1b1c13a8159386d8
805e6baebf8946d1370c969a2a7d7022859b4a753a734dea85a2620369687890
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/sticky-header-oceanwp//main.js?ver=1.0.0 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Nov 2021 18:35:54 GMT
etag: "661e63-82e-5d0879cd63680-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 567
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js?ver=6.1.1
200 OK 625 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1146)
Hash e7482c1ac3bfcf650865845a4c240b11
67db1d4334a6381e19bdd94d458a1055e4d34842
61d012d0099bc5409fcf48d2a7a405c45030918801b2298c0b34bc6860cc1566
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/pixelyoursite/dist/scripts/jquery.bind-first-0.2.3.min.js?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 Jan 2023 12:38:57 GMT
etag: "6a263c-525-5f315ea76f2ba-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 625
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/elementor/css/post-14.css?ver=1672462884
200 OK 458 B URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/elementor/css/post-14.css?ver=1672462884
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1571), with no line terminators
Hash 46b8b827237f3653297af6257b2a7382
6d8ac7484b4e4577a11d5aba278423b8c2eae540
44d1fde0fb11e8f912cf2ea31d7938f6853464759f4b7afe782eee39216d31df
GET /wp-content/uploads/elementor/css/post-14.css?ver=1672462884 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Dec 2022 05:01:24 GMT
etag: "5e0001-623-5f1189c25b58d-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 458
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4988
Expires: Wed, 01 Feb 2023 06:33:37 GMT
Date: Wed, 01 Feb 2023 05:10:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4988
Expires: Wed, 01 Feb 2023 06:33:37 GMT
Date: Wed, 01 Feb 2023 05:10:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4988
Expires: Wed, 01 Feb 2023 06:33:37 GMT
Date: Wed, 01 Feb 2023 05:10:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a36c4fb-50d9-4aa0-bfa2-db52c0bc2f9a.gif
200 OK 45 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a36c4fb-50d9-4aa0-bfa2-db52c0bc2f9a.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Hash 54d9e8efcff3cc7fa309dc41e89c2a26
fa1cd58cf243d18f360e4394a02bee994e738c0a
4dd37eec5c27d911c3193c7ba08c10a8ec2526eac48c9b6a2a4ec49502cf189a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a36c4fb-50d9-4aa0-bfa2-db52c0bc2f9a.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 44860
x-amzn-requestid: 318e5c01-c024-4c5e-8422-e6cba20b8dc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaTEeBoAMFesA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-4b775cdc759aac341f2aff9a;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vmPt8MLY6RsliPiMKcbnJ6jGjfuc8LXspyaqEIQiExnxnPOXIWDhqA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:26 GMT
age: 26343
etag: "fa1cd58cf243d18f360e4394a02bee994e738c0a"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2998f7f50ac0eec931c348e8a0fb0c60
f5e411cda74cb7fb4a662f4787e9543b9749c8b5
0c81413a819e379212bf757b1c9469415aec2ac8fdf47f94ff23c420a1da20e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 64EbarGrn6AIpXOE8TIfiBeGFQinx-P9lUIvmiQ1ivZgFrxl7_W4EQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:57:42 GMT
age: 25967
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55af221f-e2a5-4ea0-ba8f-1f045ea1cbb7.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55af221f-e2a5-4ea0-ba8f-1f045ea1cbb7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d09523ece9b6da85a1a007c7e2abcb6
a637b08e2fbba31ef60103b2d9fd3c6f96d84b27
811bbd2e85b83dcaa8743a1d7e513fd76b81d4ced2b8aa99c62f9590f20e85a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55af221f-e2a5-4ea0-ba8f-1f045ea1cbb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8812
x-amzn-requestid: 8c568658-2708-4031-93ff-1654cc17a311
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foeeZGjKIAMFyUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9aac2-4587a6e43c1430ed03d0e69b;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 23:56:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SN1t3ynbcYOqHlv7bgBwzUTdZLjPAEq8bmRuIJaKHGA-4AkcMyBJkg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 00:16:28 GMT
age: 17641
etag: "a637b08e2fbba31ef60103b2d9fd3c6f96d84b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:52:17 GMT
age: 76692
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a7557cc-bf07-438f-8710-ba1b44e30270.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a7557cc-bf07-438f-8710-ba1b44e30270.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fec00239dceb510f051645ae93dac5f2
6524837e65b070341f9c8f4589492876ae293f17
d00272557742c57d084ab7e46b9b1722b28b869ae9c63e2169e7124e5107c009
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a7557cc-bf07-438f-8710-ba1b44e30270.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5583
x-amzn-requestid: f37b4455-c9fb-46e4-a287-f40c1138a77a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflQWGqCIAMFvjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c02-01d34b0d3a9a0101555081f5;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:10:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KTfQ_pc9OU0WnnQlmhjYlFAInn2Cwz6xNGtjL3FtP5XJX8vHTidkoA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:37:27 GMT
age: 77582
etag: "6524837e65b070341f9c8f4589492876ae293f17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F352eebeb-36ab-4e45-818a-3f8bb7f7e41f.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F352eebeb-36ab-4e45-818a-3f8bb7f7e41f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eeee3f44ebd0980444f962d3936c6ec6
27f6fc214176af3a237e45022d7240123ab36f8c
255c54650fdef5af9d4f3f8ee5d25f8cf3b3b6e755f41cf5f7758e3ef96b7bac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F352eebeb-36ab-4e45-818a-3f8bb7f7e41f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6189
x-amzn-requestid: 6901e757-7950-4e70-92a9-212e91dda392
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflm0EO1IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c91-52ad7e6b3563cc46184f1a54;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:13:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: c24ZZ4IMp1Sj8mi1dOP5055neiJh4aShggwtjujZoP-TfwP_4oy7lQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:26:25 GMT
age: 78244
etag: "27f6fc214176af3a237e45022d7240123ab36f8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.10.2
200 OK 2.3 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.10.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (5315)
Hash 7ed405c7fee4b4392a6873064f9b1421
c0ef96f71b4b5d10463d710724fa301f9dffa54d
e363f656102cdafe7d2c944b4655156a81af1b144a494ff07e0e34b97ab5bead
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.10.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 12:38:31 GMT
etag: "29e0248-14ef-5f289180863dc-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2263
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/sticky-header-oceanwp//style.css?ver=6.1.1
200 OK 240 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/sticky-header-oceanwp//style.css?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
Hash e29fe59fb7f8192c5a81f6a88cbd2a7a
49cb6d2326faec291d2cf682f1b6b6667148cb67
8728f043f0287cea83619dc3e53ecaf808ecedb8e0d89835f81311603e301cfa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/sticky-header-oceanwp//style.css?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Nov 2021 18:35:54 GMT
etag: "661e58-2f1-5d0879cd63680-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 240
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/elementor/css/post-6495.css?ver=1672462885
200 OK 746 B URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/elementor/css/post-6495.css?ver=1672462885
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (5610), with no line terminators
Hash 1a37e36748d67366e09aa40949767704
006ad7e4d4e8777f33a34a08ce3e76f250846ce9
0979c36c36262fee88b2c566f6aad5571f305818f647a8c01c94e54754702b62
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-6495.css?ver=1672462885 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Dec 2022 05:01:25 GMT
etag: "5e0004-15ea-5f1189c2f2f65-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 746
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/elementor/css/post-7.css?ver=1674527973
200 OK 1.8 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/elementor/css/post-7.css?ver=1674527973
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (17441), with no line terminators
Hash 5ffb033f08bd99cb54acad5191be5739
9818ee72835a03e4637d32e31a5aff452b4c8d24
402f259aa04c2dcbd240c815e7b86e9ed1610babf80c81aa505bd37eaca4a055
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-7.css?ver=1674527973 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Jan 2023 02:39:33 GMT
etag: "5e0007-4421-5f2f96d050550-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1785
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0
200 OK 3.6 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (19277)
Hash 0e9aa8bb4e320013d128c6738ebbbd2f
bdbc947d15f2549d6a1904d2b858a2d9be767989
188c1aae4c9b6ce088a7a22c6a647788b824870e6f3fd047321b973d33eb6aa8
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b40-4b7b-5f27f0ea1e232-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3638
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/elementor/css/global.css?ver=1672462885
200 OK 3.8 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/elementor/css/global.css?ver=1672462885
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (31614)
Hash 72ece1c91711421f2470115fe150b497
bd921de646763d1ef67689cf711b0bb2d4ef045a
05e13f821a4db2ad46af74054fa77318be4c74317e584f0f87b79e13754884ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/global.css?ver=1672462885 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Dec 2022 05:01:25 GMT
etag: "5e0002-dd76-5f1189c2dbc4a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3778
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (11126)
Hash 1fbb59519536e28eeb7ae7173973c39f
f6542c5d0f96f621eea4f3cb442021dfe33863fa
b1b54befd52c3605721bf8b5a6c0290c572929138358738826873751256b191c
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
etag: "6627cf-2bd8-5b45debe27b80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3998
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=5.5.3
200 OK 4.0 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=5.5.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (26516)
Hash 9063a6bc6f7a30379d57964a0dfe380e
898ac0a822084f899dcbc484df4cc957dcdb45d3
9bf52eac32027b901b297f21b7e293102c4a602d295db9253af673bdc8e341a7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=5.5.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ad6-684e-5f27f0ea19be1-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3986
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 12 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (57726)
Hash ebe782f7880a1dc19e4a81a9c1fe36ae
e0f6b8c0b28954742c7b11d55925ad81489453ad
b06b1242b2486068a778e570624598977c4e8d2fce3c5fc287994e58877fa70e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ae1-e238-5f27f0ea19fc9-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 12147
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.1
200 OK 2.1 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (4974)
Hash 9214c74d2cc00604ba08bdee5f3fd58e
45ef0e2e7a53b769dbc8021bc63fad1f4e359e33
d035225af0a6696675643f8ea86a6bb0318f05ea3f28396b1512f45d1269a9a1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0c27-1396-5f27f0ea27a8b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2077
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/elementor/css/post-8014.css?ver=1672462885
200 OK 1.1 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/elementor/css/post-8014.css?ver=1672462885
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (4362)
Hash fc59be1de5ab5ea563fc4738824fa334
a7c4f907d715f3e980664d411f76da9d5ec9686f
0b15c110a953aaefbbd983afe137f322b3fad59eb7c7b8d2bb180aa733223fba
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-8014.css?ver=1672462885 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 31 Dec 2022 05:01:25 GMT
etag: "5e0003-2717-5f1189c2e4cd3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1126
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js?ver=2.1.3
200 OK 805 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js?ver=2.1.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1709), with no line terminators
Hash ea099b10ac42ebbad57ac9ebd5853378
393867ef29045bf8722c804c941c30cd8fb11226
ee4089f20db5ee6360b8e14989dfdd9ab9ebbbf2d398d876a8ce92823906eab5
GET /wp-content/plugins/pixelyoursite/dist/scripts/js.cookie-2.1.3.min.js?ver=2.1.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 Jan 2023 12:38:57 GMT
etag: "6a263b-6ad-5f315ea76f2ba-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 805
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.1
200 OK 2.4 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (10019)
Hash e28ebe71c5490d12576cd52e1dfc7ba4
2b0dd2a3c9f634ff2ee74675b7e9dbf087013e9e
b32a1960d6e7ccd7a0fe9099a012faf178bd0665852f4ad3ac2b308265b822ad
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b36-4824-5f27f0ea1da61-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2445
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/wp-util.min.js?ver=6.1.1
200 OK 690 B URL HTTP/2 www.ingenioustravel.com/wp-includes/js/wp-util.min.js?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1391)
Hash 6d772d2e5b7e7e71fae08ee78d08905b
187307d771fd6840e9af93eeafff96e12c0728f2
2e18ec0f3166c6988bef8a4c373e6b2ba632b556cc3d8b6f9bacbb2e90476d74
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Sep 2022 03:52:10 GMT
etag: "662697-592-5e913c0b08e80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 690
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 1.7 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (5477)
Hash b1ead9e078b8c6a5044a583ef6fbbd5e
577658f92d2657f1131a97b6f128dfdb50d21d1a
b337360f9345d0763a9394d9a2b032459e0fe6199bee2a4b76f2b8ca24d8b867
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Jun 2020 18:53:27 GMT
etag: "662836-15fd-5a7fbb57c37c0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1733
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
200 OK 1.6 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (4875)
Hash 6e77b1bf3e2473915b3befb8026b84d1
15f7b7013aa1fb46a8bcc054b13586e9442d69d4
93137953eda434f31a656affa88fbc035ea8780eee3ed3b5636fcc2194ca96a7
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
etag: "6626ec-132e-5dc5fbf1e6f80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1574
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/essential-addons-elementor/eael-7.css?ver=1673041096
200 OK 11 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/essential-addons-elementor/eael-7.css?ver=1673041096
IP
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (45011)
Hash db5d5d278ed752f6e61136e58cab72ac
e0c2170f94aa12527b0ac584d82efc3aea50700d
342449939ebf1cc921ba2fca38d4c44ca27687fb1789a27a839a496acf1ddb74
GET /wp-content/uploads/essential-addons-elementor/eael-7.css?ver=1673041096 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Jan 2023 00:42:20 GMT
etag: "5e0005-207cf-5f32005896751-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 11440
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9.1
200 OK 344 B URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (771), with no line terminators
Hash 758277f61fe595cfe78bea912eca339a
6697d5fdfaae958a32d03e691264fc6b53b56076
8bf6511f53b9fd9a924eed3d0bbb76d71f16ea47142ff02247e636c51e5a6731
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Jan 2023 12:38:24 GMT
etag: "2440e9f-303-5f2106499d347-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 344
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.10.1
200 OK 1.1 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2620), with no line terminators
Hash a322f651d65b1fe837999f3242c6cc93
a59fa7334f6a942c915f8987a309b20ea9401ba9
dfbbc5b7dc3ace426f2a2c265c16708a2a3ff426f78d2f3491342c152da92861
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b34-a3c-5f27f0ea1da61-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1052
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=5.5.3
200 OK 12 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=5.5.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (59158)
Hash 36f8306cbf415fee13ccb0186f46417f
aed73d1c99dedfcbde827a1d3465bf4ba36f4ba7
c6fe0b32fb706ba1ee0888de8b7927e8012b6c3be14d7388b16ff6c18c0f34be
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=5.5.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ad9-e7d0-5f27f0ea19be1-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 12402
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.10.2
200 OK 1.4 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.10.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3720)
Hash 356412bbb1be37708616fa176a519db8
5ce72cc66e55352959ba8c8127f5159346db7e4a
d5e1bc86ce9c6663334c398c37ceb096d3e41bd6349058249efcf9b52a1a6519
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.10.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 12:38:31 GMT
etag: "29e0199-e89-5f2891807eac3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1446
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.4 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (6475), with no line terminators
Hash fd9569e5d4d99499e7712f61cd673089
96c465e0479831743968bdd243bd3bcbfaaa6e44
ea064fac3384ce935085b6a08a0b5379be3b747b3ce9ea87b6c9d41d1cd93f02
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
etag: "6626a9-194b-5dc5fbf1e6f80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2362
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/pixelyoursite/dist/scripts/public.js?ver=9.3.2
200 OK 15 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/pixelyoursite/dist/scripts/public.js?ver=9.3.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type C source, Unicode text, UTF-8 text
Hash e8ede555de537c60035f652c764fae90
45106d0c7d1596ec1ba1759135f03d1302ba011e
3d16051a097445dd0b9cd97b00959c60173afa02471c2f183b23ff3de58db977
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/pixelyoursite/dist/scripts/public.js?ver=9.3.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 Jan 2023 12:38:57 GMT
etag: "6a2639-17dbb-5f315ea76f2ba-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 15226
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.5.3
200 OK 2.9 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.5.3
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (8770), with no line terminators
Hash 081184a4fd731371a7a340f836fde6c6
5f5df4e189ae36e2986c08927425c99c9c2b8231
e90dd5a2084fac2e5b968845a6b17f8f214ec3f2b5bb13402b65bdbc0989f015
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.5.3 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Jan 2023 00:40:42 GMT
etag: "a20935-2242-5f31fffa50c6a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2938
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
200 OK 3.7 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
IP
ASN #398101 GO-DADDY-COM-LLC
Hash 6e6532668ca7ef382a54aeba2506c04d
bfdce7aa0af70ef36f55d72ae73d9071043a5e3c
7f3d6787fb15dd949a79c54caca8318fcb38bebc53103d4ee7f732c430e3ecda
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 23 Sep 2022 19:55:30 GMT
etag: "6626f4-27f6-5e95d8f5cb080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3720
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
200 OK 3.3 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (10544)
Hash e4d72ab6d1e334f5a29f3052ef000615
43eaff3d97c24cc4004273abce5c2fc1a75e83a4
09791bf99f9a4742433e3b3d00135999dd5612d46ead04c42f9b2ec12dfe4282
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b3b-29ba-5f27f0ea1de4a-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3274
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 30 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65447)
Hash fb1aea2f7ce09f9d2e290d73d57defdf
62d40e64c8aeff20834868816d20d6a645fd2565
367cc15d582c7056695a307c1ef9b32a9e4810c16e33f27eac05909a1f57d4b4
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
etag: "6627d7-15e54-5e9085b47de00-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 30350
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.10.2
200 OK 35 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.10.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65492)
Hash ac6207851808138b022b4098826ef386
fe688afa8d08df071a4847b47b701e102b626299
7528670577c5a5548f87c16bbf2d4df4b844c119844b55efe7adc7315b00fa6f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.10.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 12:38:31 GMT
etag: "29e0213-633fe-5f289180840b4-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 35046
content-type: text/css
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 2.9 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (12198), with no line terminators
Hash 944267e8c3c28fae2ad68dc9b6904f35
f4a5b08c185028bb018925510ddb2f987b6d612a
9b965c6204d91d7ca4ec7ffccb99510fda6aaed1bb98fdb0c844186bd1dc499d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b0a-2fa6-5f27f0ea1bf09-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2869
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 4.6 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15660)
Hash a0083d25b89ea80ecd2393db9f865d62
24eaf2df7c722fb13f2b5bf77ada5ee446720c25
f7533cb93f2efbb9e3bccfa9ff4036a2cafa7dd1bd4d66bea4833306b321e957
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
etag: "66286f-48b9-5dc6eb878efc0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4614
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/12/Syrie-James.jpg
200 OK 20 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/12/Syrie-James.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 364x363, components 3\012- data
Hash 40814fe4540fa4851c8db633226a15fe
ca0f5824c0c1f997fa55b1ef42c8629cce57a630
b04523ef3033f6b4256e92535adf8648b2c23c7e1c9628c49c2263497bbbcd34
GET /wp-content/uploads/2021/12/Syrie-James.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 20 Dec 2021 23:58:48 GMT
etag: "5e149b-4cc8-5d39cab6d9e00"
accept-ranges: bytes
content-length: 19656
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.10.2
200 OK 5.5 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.10.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (21520)
Hash f44a3c6416d306f3c1c32a972b9f92e0
44fc0ac2311ceea56e95bb9cb69e986eb31bd945
c33bfb222a4af65fe2c4cdeeb4d483b7ded9df6348c779e9b5eaec0b58194a1e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.10.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 12:38:31 GMT
etag: "29e0260-543c-5f28918087764-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 5548
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.4 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 68ac7f65718f620d2a08c8dd44990aee
51864b639a094231cd78cde224b119cb920d7d11
cfb9e332da756003e32aaf8503cd187ac0307b74742742e38348fe783a655b14
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Sep 2022 15:43:29 GMT
etag: "6626b2-459f-5e91db08e6a40-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 6352
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=6.1.1
200 OK 6.5 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=6.1.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (21388)
Hash 087bf74d496c3dc5be0c8e1ade47b646
2ea7aa187ec55ac4190d46cab5ae56aee2944471
b8f1ac6dc70c41712faaf32761931d19e3423d30e301368dd17cfb82e1d4d44e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=6.1.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 18 Oct 2022 12:38:08 GMT
etag: "29e02e9-5417-5eb4e5d43edca-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 6514
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
200 OK 6.9 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (25115)
Hash 7ac75e081b48fb3813c5d1a5b9eaa920
22d8cb81f075f8400d94299749b4a6d36a4ecb34
0345276757a8d291507a24c90010ffe5011110ea4ee53c44881b5df97c34a8e4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 12:38:31 GMT
etag: "29e01a5-6272-5f2891807f293-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 6938
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 7.2 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (18798)
Hash b6d2d63175163c58b48904bff97b60ae
e5954d2baa5fabe47aedaf8e38933b8a591088b9
30a9448b0287da8135d918b2ee48e065999a8ab4a7dd04abef3f42bc80b2ddcb
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Sep 2022 15:18:25 GMT
etag: "66268f-4991-5e9aa27ccd240-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 7198
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/12/Christina-McDonald.jpg
200 OK 28 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/12/Christina-McDonald.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, progressive, precision 8, 640x640, components 3\012- data
Hash 45164ed7ae630a39432181975469fe7f
28bec99ad4c114e36778f44c3e6c596654f6b0e1
80e5a799abe7805a1ca4b61be9b9a7da54ad9b08f7a84426820f450e9990541c
GET /wp-content/uploads/2021/12/Christina-McDonald.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 20 Dec 2021 23:56:31 GMT
etag: "5e14aa-6bbe-5d39ca34329c0"
accept-ranges: bytes
content-length: 27582
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 6.8 kB URL HTTP/2 www.ingenioustravel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash fcaa8987fae3c9c571ec0eef98c6476c
48ecee4ad6cc641d9a97f2c3dc3460a85e65ec2a
53b64ba30e018b23c555163577085c8171555d6e879ad2eb1b3a28baff8281cf
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 23 Sep 2022 19:55:30 GMT
etag: "6627e7-53c0-5e95d8f5cb080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 6809
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.1
200 OK 11 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (35829)
Hash c25fd3a53b379bda6c40604327ce87f9
7af60b528b85d6c035b9b1566355109df54a071f
241fc895a78160135597ba0c11d9578f7a8479279d1fd1fa500bf80e4b6420f7
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0c48-8c1e-5f27f0ea291fb-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 11113
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/essential-addons-elementor/eael-7.js?ver=1673041096
200 OK 12 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/essential-addons-elementor/eael-7.js?ver=1673041096
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (46034), with no line terminators
Hash 9c8c966e967a73eec6c68c5fd4b1b29c
07d0890699989ff404dd3960defcfc182774b299
e98b87eb5b9e69e0ac8659739c26ed8436d3fa0bf2cc49b4fa0a9097ae0738ee
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/essential-addons-elementor/eael-7.js?ver=1673041096 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 26 Jan 2023 00:42:20 GMT
etag: "5e0006-b3d2-5f32005896751-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 12328
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.1
200 OK 12 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (40802)
Hash 7db53b69bded4fc3db33a4be8019cece
1bf7da1b34baad476109d296cff54ad2cbe29b13
e1a8dc407444882470acc5c7113e7476566dd7e6efa399248895c6e91e7c3cb8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0c63-9f8a-5f27f0ea2b13b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 11806
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.10.1
200 OK 13 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.10.1
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (43869)
Hash d12a136bd54e11fe2f3a9df4fff5cd50
1bd09e8a77b100c5add9ccdfe697dd070a97c6fd
6c3f201a588afb5b398f7027046194fd6ceb8819be616eb2f900c757d3818ccd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.10.1 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0c6c-ab85-5f27f0ea2b90b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 12767
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.10.2
200 OK 33 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.10.2
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65492)
Hash b3de4ff2ddf8182f7d087426d1227636
83562633e4b62613c1cc5044f357c1288be502d8
ea5359e987a5122899858bd30ac826d735800a88352956170f59e1beaf878868
GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.10.2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 12:38:31 GMT
etag: "29e024f-2461e-5f28918086bac-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 33122
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
200 OK 34 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65280)
Hash b2ce6e274d6b80519cc434f400c7886d
2236ee64086892054ed8090b6f0b6812e5937c22
986925502e4db6b7b47f5ab82447f4e6f374058fba6730b77b10384261745376
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b26-21f91-5f27f0ea1d291-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 33848
content-type: application/javascript
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/bilbo/v20/o-0EIpgpwWwZ220mroU.woff2
200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/bilbo/v20/o-0EIpgpwWwZ220mroU.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19136, version 1.0\012- data
Hash 6c71e09995c12c6e1331a7f4bd8cc92e
7f237598ce68a6ccf87ba10caafe4c21fffa9270
5a937bff04e0314fbd4ecc7fa34c9cf570ea15c7ec42e67873e095ee12d4137c
GET /s/bilbo/v20/o-0EIpgpwWwZ220mroU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19136
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 06:17:29 GMT
expires: Sat, 27 Jan 2024 06:17:29 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:24:07 GMT
content-type: font/woff2
age: 427981
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/bilboswashcaps/v22/zrf-0GXbz-H3Wb4XBsGrTgq2PVmdmATipw.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/bilboswashcaps/v22/zrf-0GXbz-H3Wb4XBsGrTgq2PVmdmATipw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21312, version 1.0\012- data
Hash 9171e94906ea199eb0fd6f30d74e7279
9d722b28e9f1b5ca9b29cd3ee9b71a87de61e2a3
52fd0538a01109d201841397a7b83e8ffea47b729da2e7ba1e889da4eeb3d0ec
GET /s/bilboswashcaps/v22/zrf-0GXbz-H3Wb4XBsGrTgq2PVmdmATipw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21312
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 06:04:43 GMT
expires: Sat, 27 Jan 2024 06:04:43 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:16:07 GMT
content-type: font/woff2
age: 428747
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 10:26:49 GMT
expires: Sun, 28 Jan 2024 10:26:49 GMT
cache-control: public, max-age=31536000
age: 326621
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 22:02:00 GMT
expires: Mon, 29 Jan 2024 22:02:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 198510
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 07:51:59 GMT
expires: Thu, 25 Jan 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 595111
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 12:49:39 GMT
expires: Sun, 28 Jan 2024 12:49:39 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 318051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ingenioustravel.com/wp-content/uploads/2022/08/st-andrews-g3cfe3b31f_1280.jpg
200 OK 358 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2022/08/st-andrews-g3cfe3b31f_1280.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1280x853, components 3\012- data
Size 358 kB (358018 bytes)
Hash a2b967cac6cedeb2838b33b812d1917b
5bb13fa1fa599f803be2e64f24379abb033045b9
09f4c4d5fff64d475802778d30889a05002ca9e86fd3d88d07a1869f28aa02c7
GET /wp-content/uploads/2022/08/st-andrews-g3cfe3b31f_1280.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/uploads/elementor/css/post-7.css?ver=1674527973
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:21:39 GMT
etag: "620002-57682-5e6110792bb08"
accept-ranges: bytes
content-length: 358018
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
unpkg.com/intl-tel-input@17.0.18/build/css/intlTelInput.min.css
200 OK 12 kB URL HTTP/2 unpkg.com/intl-tel-input@17.0.18/build/css/intlTelInput.min.css
IP
File type ASCII text, with very long lines (19157), with no line terminators
Hash 11be30eb5b426813779c0edf600e00c5
0fe3733931e7dbfda4944abf5e607dfb414dac95
5082ed9ff8bd9144d1c23444dee05c66cb27b95bc1222e20e04305bf311330aa
GET /intl-tel-input@17.0.18/build/css/intlTelInput.min.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 05:10:30 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"4ad5-/7iiVjPE3eq4HRsXQqwv0LRCpMY"
via: 1.1 fly.io
fly-request-id: 01GAKZEYB03B4H35RFNZ0NVVM9-fra
cf-cache-status: HIT
age: 14552841
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79282e59782eb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/11/Services-Depositphotos_13250033_S-e1640045394413.jpg
200 OK 114 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/Services-Depositphotos_13250033_S-e1640045394413.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=17, height=3580, bps=218, compression=none, PhotometricIntepretation=RGB, description=Hand of a man using a hotel bell , manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 999x640, components 3\012- data
Size 114 kB (114129 bytes)
Hash b923d356443256ef84237287bcc0f3d4
5b50a6aee042771d67527f388a62c65287746bce
9b19e63348e40f44d1a0bbb134250af5764f6b0c1964b380457bfb94c578e533
GET /wp-content/uploads/2021/11/Services-Depositphotos_13250033_S-e1640045394413.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 00:09:54 GMT
etag: "5e15a1-1bdd1-5d39cd31ff880"
accept-ranges: bytes
content-length: 114129
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-JW9CJYNNGE
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-JW9CJYNNGE
IP
File type ASCII text, with very long lines (19467)
Hash 61637cec13ffdaa0c47a1cf427441667
2de95389fe6117cb76b5581c67aea292df7f3d80
9e348e2b81f6fae8cefb502dc35e05bdedd82ecba173b9b1a70e1beb4c5b895a
GET /gtag/js?id=G-JW9CJYNNGE HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 05:10:30 GMT
expires: Wed, 01 Feb 2023 05:10:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77117
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ingenioustravel.com/wp-content/uploads/2021/11/Profile-Pic.jpg
200 OK 31 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/Profile-Pic.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 378x388, components 3\012- data
Hash dce4594eca16f9e686f9e2ad66a02bd4
7f4afc4405628578552d3f99b7554df96ce33b6a
e27873351de41ab06174634dbcbf4529abf4f3fa1d26d9e454dc9c90f6c1ad4b
GET /wp-content/uploads/2021/11/Profile-Pic.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Nov 2021 20:50:53 GMT
etag: "5e15d4-778e-5d0897f932540"
accept-ranges: bytes
content-length: 30606
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2022/02/cropped-Ingenious-Travel-Logo-Dark-png.jpg
200 OK 24 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2022/02/cropped-Ingenious-Travel-Logo-Dark-png.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 299x299, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=525], baseline, precision 8, 525x118, components 3\012- data
Hash 3b5dd4586f1cf9a2e617144ec27ba1e8
ab1fbf307322ef6f5d4eff08493a90821685c573
367a61ad69e3f133b4c30321ecdac6d260ba1780a3cc9a882d3425987940c325
GET /wp-content/uploads/2022/02/cropped-Ingenious-Travel-Logo-Dark-png.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 20 Feb 2022 01:03:29 GMT
etag: "5e0c12-5bbf-5d868af12da40"
accept-ranges: bytes
content-length: 23487
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #398101 GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=5.5.3
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ac7-12bdc-5f27f0ea18c41"
accept-ranges: bytes
content-length: 76764
vary: Accept-Encoding
content-type: font/woff2
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #398101 GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=5.5.3
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0ac8-13174-5f27f0ea18c41"
accept-ranges: bytes
content-length: 78196
vary: Accept-Encoding
content-type: font/woff2
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.17.0
200 OK 93 kB URL HTTP/2 www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.17.0
IP
ASN #398101 GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 93444, version 1.0\012- data
Hash 0d1a44bc222da28ed1cf0c6f29e73c55
ad1e7b04dbccbc51c2c3bd4f45f7381820b9647f
15ecd2c95dbae27cb05d094955791c6cabbc022fff88c43ad375a61642666f52
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.17.0 HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 00:40:03 GMT
etag: "24e0b43-16d04-5f27f0ea1e232"
accept-ranges: bytes
content-length: 93444
vary: Accept-Encoding
content-type: font/woff2
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2022/02/642104-56.jpg
200 OK 337 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2022/02/642104-56.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=18, height=667, bps=230, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=1000], baseline, precision 8, 1000x667, components 3\012- data
Size 337 kB (337438 bytes)
Hash 03adebc00b0a13464091e0a298241648
0c9d1d608527e0bea26b50bb28f4d7365072d5a8
dc596e88802d7dcf4ea12f8f54e60a822b9aa398c9fa4aeaa385e2453c83d577
GET /wp-content/uploads/2022/02/642104-56.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/uploads/elementor/css/post-7.css?ver=1674527973
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 08 Feb 2022 02:47:57 GMT
etag: "5e0b33-5261e-5d778be947140"
accept-ranges: bytes
content-length: 337438
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/11/RC-oon-the-Rhine-dreamstime_s_144432785.jpg
200 OK 486 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/RC-oon-the-Rhine-dreamstime_s_144432785.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, copyright=(c) Waeske | Dreamstime.com], baseline, precision 8, 800x600, components 3\012- data
Size 486 kB (486239 bytes)
Hash a3d0b401869d06aa36aab7d7fbd5cb3d
dba9c66210152588e4fcacb21fc70902d4cb16e0
73a274ca474342f8fe6064b803c4e663bb2994e6cd048cd9f14dc3612342def6
GET /wp-content/uploads/2021/11/RC-oon-the-Rhine-dreamstime_s_144432785.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 20 Nov 2021 22:28:52 GMT
etag: "5e1568-76b5f-5d13fea8ff100"
accept-ranges: bytes
content-length: 486239
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/11/sitting-on-beach-with-phone-Depositphotos_275876548_S.jpg
200 OK 661 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/sitting-on-beach-with-phone-Depositphotos_275876548_S.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=15, height=3690, bps=194, PhotometricIntepretation=RGB, description=Woman talking on her phone at a paradisiac tropical beach, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5535], baseline, precision 8, 1000x667, components 3\012- data
Size 661 kB (661203 bytes)
Hash d41ac37f0650d2b1640dde3181cfe2ae
ca360537174a8b7140d7350a2eddf20eb49e4382
fdf32fcc90bd07d615b874918b3cfce0f72ac04a08c2b85cfc32925750f83830
GET /wp-content/uploads/2021/11/sitting-on-beach-with-phone-Depositphotos_275876548_S.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 12 Nov 2021 18:08:54 GMT
etag: "5e1532-a16d3-5d09b5a1e5980"
accept-ranges: bytes
content-length: 661203
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/11/Portree.jpg
200 OK 1.2 MB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/Portree.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=23, height=3744, bps=290, compression=none, PhotometricIntepretation=RGB, description=view on Portree before sunset, Isle of Skye, Scotland, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 1000x667, components 3\012- data
Size 1.2 MB (1196873 bytes)
Hash e0649dd479fb0adbd1000d09b6891eca
4da17dac72b66aab9e7246fbfadb1988d15dd795
6c7861afe1bf74968ecf7b4b7f614828ff31619837782dfe59f2f560a490f40c
GET /wp-content/uploads/2021/11/Portree.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Nov 2021 20:49:02 GMT
etag: "5e15be-124349-5d08978f56b80"
accept-ranges: bytes
content-length: 1196873
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/11/sika-meli-tiri-Depositphotos_193676690_S.jpg
200 OK 1.0 MB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/sika-meli-tiri-Depositphotos_193676690_S.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=20, height=3648, bps=254, PhotometricIntepretation=RGB, description=Camembert cheese, cuts and walnuts on stone serving board, manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=5472], baseline, precision 8, 1000x667, components 3\012- data
Size 1.0 MB (1034034 bytes)
Hash dd9638f6bed690ed83fda52a80b2edbc
41ef9c9186f1a504f481f56ec856522bdb43adba
0e72bb218917ad7dcb2a434bcb13d27fe1461ecb421a116efa05c26a8ca44623
GET /wp-content/uploads/2021/11/sika-meli-tiri-Depositphotos_193676690_S.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/uploads/elementor/css/post-7.css?ver=1674527973
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Nov 2021 20:54:51 GMT
etag: "5e15e1-fc732-5d0898dc2bcc0"
accept-ranges: bytes
content-length: 1034034
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/11/Map-small-Depositphotos_150027520_s-2019.jpg
200 OK 1.1 MB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/11/Map-small-Depositphotos_150027520_s-2019.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4912, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=7360], baseline, precision 8, 999x667, components 3\012- data
Size 1.1 MB (1050953 bytes)
Hash fde4598f96d8912b0a9ca705a4277aab
fc1a09a2656b16d34f13393ff7fa52af1354db9f
873bec4d52e66edf48668b8dfb3e3301ae4ff682498dfe9160c351ff4223b949
GET /wp-content/uploads/2021/11/Map-small-Depositphotos_150027520_s-2019.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Nov 2021 20:17:52 GMT
etag: "5e14e6-100949-5d0b1452e3c00"
accept-ranges: bytes
content-length: 1050953
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2020/08/shutterstock_1121247536.png
200 OK 1.5 MB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2020/08/shutterstock_1121247536.png
IP
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 2000 x 1333, 8-bit colormap, non-interlaced\012- data
Size 1.5 MB (1549913 bytes)
Hash 23d5513a0a167b1d6f73b2bfbe1e203b
faad59744cef13574c02b30febe2e8cd530051e5
993bd7b4421a6285fd7278556645bc42aa6c363127d9bd5adabdb465b640caaf
GET /wp-content/uploads/2020/08/shutterstock_1121247536.png HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/wp-content/uploads/elementor/css/post-7.css?ver=1674527973
Cookie: pys_session_limit=true; pys_start_session=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 Aug 2020 20:02:06 GMT
etag: "5e1657-17a659-5ac3af66d6b80"
accept-ranges: bytes
content-length: 1549913
content-type: image/png
date: Wed, 01 Feb 2023 05:10:30 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4500
Cache-Control: max-age=170236
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:31 GMT
Etag: "63d9d8af-1d7"
Expires: Fri, 03 Feb 2023 04:27:47 GMT
Last-Modified: Wed, 01 Feb 2023 03:12:47 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: dryXbBTDrn+QL0A8wUQz+fBttAgSB3PozRlxXnhNPTE9SK6bUX+vhDqMmZQ/ragVuXUIGZcA43kOIZ/ksiQUQg==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Wed, 01 Feb 2023 05:10:31 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4500
Cache-Control: max-age=170236
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 05:10:31 GMT
Etag: "63d9d8af-1d7"
Expires: Fri, 03 Feb 2023 04:27:47 GMT
Last-Modified: Wed, 01 Feb 2023 03:12:47 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.ingenioustravel.com/wp-content/uploads/2021/12/cropped-Ingenious-Travel-Logo-Dark-230-x-70-192x192.jpg
200 OK 18 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/12/cropped-Ingenious-Travel-Logo-Dark-230-x-70-192x192.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=525], baseline, precision 8, 192x192, components 3\012- data
Hash 0e2c4429bf8df92ef22c00b5911cb02f
d25ed04a3b791ef3583019d2da7135b341d21002
e19bac18aabac82dd5b129ca905ed39550b2e3638bb65e06c78f04990aac0e19
GET /wp-content/uploads/2021/12/cropped-Ingenious-Travel-Logo-Dark-230-x-70-192x192.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.ingenioustravel.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://www.ingenioustravel.com/; _ga_JW9CJYNNGE=GS1.1.1675228251.1.0.1675228251.0.0.0; _ga=GA1.1.721639220.1675228251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 04:00:18 GMT
etag: "5e1495-4511-5d3a00b197880"
accept-ranges: bytes
content-length: 17681
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/12/cropped-Ingenious-Travel-Logo-Dark-230-x-70-32x32.jpg
200 OK 13 kB URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/12/cropped-Ingenious-Travel-Logo-Dark-230-x-70-32x32.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=525], baseline, precision 8, 32x32, components 3\012- data
Hash 49d98d01f957e0e6059a724eb52e0809
a0056778e8bcd487d17034d6a111694fb87a1ff9
d7ab9bda684d2883262dad859de79335074d55ecc73ed646b405933d7a794690
GET /wp-content/uploads/2021/12/cropped-Ingenious-Travel-Logo-Dark-230-x-70-32x32.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Cookie: pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://www.ingenioustravel.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://www.ingenioustravel.com/; _ga_JW9CJYNNGE=GS1.1.1675228251.1.0.1675228251.0.0.0; _ga=GA1.1.721639220.1675228251
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 04:00:18 GMT
etag: "5e149e-324a-5d3a00b197880"
accept-ranges: bytes
content-length: 12874
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:31 GMT
server: Apache
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-JW9CJYNNGE>m=2oe1u0&_p=611118649&cid=721639220.1675228251&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675228251&sct=1&seg=0&dl=https%3A%2F%2Fwww.ingenioustravel.com%2F&dt=Home%20-%20Ingenious%20Travel&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.link_attribution=false&ep.anonymize_ip=false&ep.debug_mode=false
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-JW9CJYNNGE>m=2oe1u0&_p=611118649&cid=721639220.1675228251&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675228251&sct=1&seg=0&dl=https%3A%2F%2Fwww.ingenioustravel.com%2F&dt=Home%20-%20Ingenious%20Travel&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.link_attribution=false&ep.anonymize_ip=false&ep.debug_mode=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-JW9CJYNNGE>m=2oe1u0&_p=611118649&cid=721639220.1675228251&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675228251&sct=1&seg=0&dl=https%3A%2F%2Fwww.ingenioustravel.com%2F&dt=Home%20-%20Ingenious%20Travel&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.link_attribution=false&ep.anonymize_ip=false&ep.debug_mode=false HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ingenioustravel.com
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.ingenioustravel.com
date: Wed, 01 Feb 2023 05:10:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=623452065622865&ev=PageView&dl=https%3A%2F%2Fwww.ingenioustravel.com%2F&rl=&if=false&ts=1675228252087&cd[page_title]=Home&cd[post_type]=page&cd[post_id]=7&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.ingenioustravel.com%2F&sw=1280&sh=1024&v=2.9.95&r=stable&a=dvpixelyoursite&ec=0&o=30&fbp=fb.1.1675228252085.741922918&it=1675228251880&coo=false&rqm=GET
200 OK 110 kB URL HTTP/2 www.facebook.com/tr/?id=623452065622865&ev=PageView&dl=https%3A%2F%2Fwww.ingenioustravel.com%2F&rl=&if=false&ts=1675228252087&cd[page_title]=Home&cd[post_type]=page&cd[post_id]=7&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.ingenioustravel.com%2F&sw=1280&sh=1024&v=2.9.95&r=stable&a=dvpixelyoursite&ec=0&o=30&fbp=fb.1.1675228252085.741922918&it=1675228251880&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 110 kB (110177 bytes)
Hash e2448c9b2fd1058c58df16dcffa61019
f2a372e603372f40c684abd53b9b0ca2c8e77579
81065ac2893390b30db55d773a76bf9dc7f4ce8e8a413c172f8aee5aafc01d8d
GET /tr/?id=623452065622865&ev=PageView&dl=https%3A%2F%2Fwww.ingenioustravel.com%2F&rl=&if=false&ts=1675228252087&cd[page_title]=Home&cd[post_type]=page&cd[post_id]=7&cd[plugin]=PixelYourSite&cd[user_role]=guest&cd[event_url]=www.ingenioustravel.com%2F&sw=1280&sh=1024&v=2.9.95&r=stable&a=dvpixelyoursite&ec=0&o=30&fbp=fb.1.1675228252085.741922918&it=1675228251880&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 01 Feb 2023 05:10:32 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ecb7da6-1717-43aa-b55e-cac2ea0272ce.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ecb7da6-1717-43aa-b55e-cac2ea0272ce.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 047bbffc1f0f6f90b9bccba83c5e0a9a
74d4eeea563d3d0514caf90cd7e99f368622c97b
d12c16dbb4c87c4b291fbf3b753bd330319bf7d29516669b0133391f08b9ce6c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ecb7da6-1717-43aa-b55e-cac2ea0272ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6993
x-amzn-requestid: 4ea76d66-e9be-460e-a503-2076755f96d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fln9kGKYoAMFsqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d886bd-715420b3594dfb827abb0d93;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 03:10:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jGc6hOmzWmSMiFOhAWScYYuvHEO8UN3rFAJhlPT9AJNJbBThAfKPjg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 04:07:32 GMT
age: 3784
etag: "74d4eeea563d3d0514caf90cd7e99f368622c97b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/12/Safia.jpg
200 OK 0 B URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/12/Safia.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
GET /wp-content/uploads/2021/12/Safia.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 00:06:25 GMT
etag: "5e148f-45c02-5d39cc6aae240"
accept-ranges: bytes
content-length: 285698
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
static.mailerlite.com/data/a/1599/1599866/universal/k3e2t6g6q5_popups.js?v=1675228250
200 OK 0 B URL HTTP/2 static.mailerlite.com/data/a/1599/1599866/universal/k3e2t6g6q5_popups.js?v=1675228250
IP
GET /data/a/1599/1599866/universal/k3e2t6g6q5_popups.js?v=1675228250 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 05:10:30 GMT
content-type: application/javascript
last-modified: Sun, 27 Mar 2022 03:04:22 GMT
vary: Accept-Encoding
etag: W/"623fd436-145d"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: MISS
expires: Mon, 06 Feb 2023 05:10:30 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 79282e59ee890b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.mailerlite.com/css/universal.css?v4
200 OK 0 B URL HTTP/2 static.mailerlite.com/css/universal.css?v4
IP
GET /css/universal.css?v4 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 05:10:30 GMT
content-type: text/css
last-modified: Tue, 31 Jan 2023 13:56:22 GMT
vary: Accept-Encoding
etag: W/"63d91e06-30e"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: HIT
age: 1012
expires: Mon, 06 Feb 2023 05:10:30 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 79282e59ee870b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ingenioustravel.com/wp-content/uploads/2021/12/St.-John-lg.jpg
200 OK 0 B URL HTTP/2 www.ingenioustravel.com/wp-content/uploads/2021/12/St.-John-lg.jpg
IP
ASN #398101 GO-DADDY-COM-LLC
GET /wp-content/uploads/2021/12/St.-John-lg.jpg HTTP/1.1
Host: www.ingenioustravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 00:03:49 GMT
etag: "5e1487-169cb-5d39cbd5e8340"
accept-ranges: bytes
content-length: 92619
content-type: image/jpeg
date: Wed, 01 Feb 2023 05:10:29 GMT
server: Apache
X-Firefox-Spdy: h2
static.mailerlite.com/js/universal.js?167522
200 OK 0 B URL HTTP/2 static.mailerlite.com/js/universal.js?167522
IP
GET /js/universal.js?167522 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 05:10:30 GMT
content-type: application/javascript
last-modified: Tue, 31 Jan 2023 13:56:32 GMT
vary: Accept-Encoding
etag: W/"63d91e10-404b"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: HIT
age: 986
expires: Mon, 06 Feb 2023 05:10:30 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 79282e58fe1d0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Bilbo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBilbo+Swash+Caps%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAbel%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Bilbo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBilbo+Swash+Caps%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAbel%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP
GET /css?family=Bilbo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBilbo+Swash+Caps%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAbel%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Feb 2023 05:10:29 GMT
date: Wed, 01 Feb 2023 05:10:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
truevail.activehosted.com/f/embed.php?id=819
200 OK 0 B URL HTTP/2 truevail.activehosted.com/f/embed.php?id=819
IP
GET /f/embed.php?id=819 HTTP/1.1
Host: truevail.activehosted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ingenioustravel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 05:10:30 GMT
content-type: text/javascript;charset=UTF-8
expires: Wed, 01 Feb 2023 09:10:30 GMT
cache-control: public, max-age=14400
pragma: no-cache
x-request-id: 0e85e24ea36ac24a6b8c007b6fd71e0d
last-modified: Tue, 31 Jan 2023 18:53:00 GMT
cf-cache-status: EXPIRED
vary: Accept-Encoding
server: cloudflare
cf-ray: 79282e5338cab50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
72.167.106.175
93.184.220.29
157.240.205.35
104.18.12.69
31.13.72.12
23.36.77.32