r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7807
Expires: Mon, 28 Nov 2022 19:04:06 GMT
Date: Mon, 28 Nov 2022 16:53:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3913
Cache-Control: max-age=153755
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:59 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:36:34 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 16:19:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2067
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10007
Expires: Mon, 28 Nov 2022 19:40:46 GMT
Date: Mon, 28 Nov 2022 16:53:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: w+93YNLgddg1s/nzIXjr64d6jJQc95JgxOMzBfkYtp/R2VxGMWYzLHje9KSfbDv6MiWT3JqDzKU=
x-amz-request-id: HSAR3Y9KCYXK8G2Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 16:42:08 GMT
age: 711
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Serif%3A400%2C400i%2C700%2C700i%7COpen+Sans%3A400%2C400i%2C600%2C700%2C700i&subset=latin%2Clatin-ext%2Ccyrillic&ver=5.5.3
200 OK 1.2 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Noto+Serif%3A400%2C400i%2C700%2C700i%7COpen+Sans%3A400%2C400i%2C600%2C700%2C700i&subset=latin%2Clatin-ext%2Ccyrillic&ver=5.5.3
IP
Hash c663a422285f594a73eb15c63e31ed8b
a7d68021c788bb977506b25754cecf80fa3ce273
75b4dc554f59e81f51bb98633fa701b58c7daef885275c08a8fbba5d3327d32f
GET /css?family=Noto+Serif%3A400%2C400i%2C700%2C700i%7COpen+Sans%3A400%2C400i%2C600%2C700%2C700i&subset=latin%2Clatin-ext%2Ccyrillic&ver=5.5.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 28 Nov 2022 16:54:00 GMT
Date: Mon, 28 Nov 2022 16:54:00 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
themantraone.com/reservation.html
200 OK 89 kB URL HTTP/1.1 themantraone.com/reservation.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (16000), with CRLF, LF line terminators
Hash 5537b0ff409a9f6cc4cb6736fcea84f7
ff2b88b233a72e842c2731ae9bb579e4cb430146
d096d5d19e7c0cba179ce5d77e1a1ed3dd2c1c8f608e5c04b85a4d9e22a9a993
Analyzer Verdict Alert fortinet Malware
GET /reservation.html HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:53:59 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 09 Jun 2021 13:33:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html
themantraone.com/wp-includes/css/dist/block-library/style.min56975697.css?ver=5.5.3
200 OK 10 kB URL HTTP/1.1 themantraone.com/wp-includes/css/dist/block-library/style.min56975697.css?ver=5.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (27100)
Hash b650e5ddf81930091a075380ccc8c5b1
0ab1a085f80e5dea10ac546ce874e50bbf356adc
82ec65bdf3e49407d0cfbeb82aba8c5af94296015ff9ef5ddcebd4fa2d4b40cc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min56975697.css?ver=5.5.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 02 Mar 2021 17:55:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10450
Keep-Alive: timeout=5, max=75
Content-Type: text/css
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_fced9c66a0e90a6c2c599cad7c8b4a14694e694e.css?ver=1.6.7
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_fced9c66a0e90a6c2c599cad7c8b4a14694e694e.css?ver=1.6.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_fced9c66a0e90a6c2c599cad7c8b4a14694e694e.css?ver=1.6.7 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_40fb4b8593151647f08ee448b05a6eac56975697.css?ver=5.5.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_40fb4b8593151647f08ee448b05a6eac56975697.css?ver=5.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_40fb4b8593151647f08ee448b05a6eac56975697.css?ver=5.5.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_cec4aad89898d66880cefa62ceb8023f56975697.css?ver=5.5.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_cec4aad89898d66880cefa62ceb8023f56975697.css?ver=5.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_cec4aad89898d66880cefa62ceb8023f56975697.css?ver=5.5.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_c72a62925997a10f520b96d14652edde2e462e46.css?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_c72a62925997a10f520b96d14652edde2e462e46.css?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_c72a62925997a10f520b96d14652edde2e462e46.css?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/assets/css/mphb.min2e462e46.css?ver=3.9.2
200 OK 2.2 kB URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/assets/css/mphb.min2e462e46.css?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9771), with no line terminators
Hash 8060bded392da9894dfc7e6b3480f65f
c35c89816081a1070a42860e756a7093b7bdf5eb
2105d62259cdfe88aedadf524cf933c914d73fe0a6207d2f669c59cc76e25a99
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/motopress-hotel-booking/assets/css/mphb.min2e462e46.css?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 10 Mar 2021 16:21:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2240
Keep-Alive: timeout=5, max=75
Content-Type: text/css
www.jscache.com/wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2
301 Moved Permanently 0 B URL HTTP/2 www.jscache.com/wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2 HTTP/1.1
Host: www.jscache.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: envoy
location: https://www.tripadvisor.com/wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2
expires: 0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
timing-allow-origin: https://www.tripadvisor.com
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:54:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1681-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669654440.244906,VS0,VE188
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:54:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.tripadvisor.in/img/cdsi/partner/transparent_pixel-11863-2.gif
200 OK 43 B URL HTTP/2 www.tripadvisor.in/img/cdsi/partner/transparent_pixel-11863-2.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /img/cdsi/partner/transparent_pixel-11863-2.gif HTTP/1.1
Host: www.tripadvisor.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
cache-control: private, max-age=43200
expires: Tue, 29 Nov 2022 04:54:00 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
timing-allow-origin: https://www.tripadvisor.com
content-type: image/gif
content-length: 43
date: Mon, 28 Nov 2022 16:54:00 GMT
set-cookie: TADCID=7BXxRInwuX3gy_-1ABQCFdpBzzOuRA-9xvCxaMyI13HXQ20xFMBidFXRBXMx591-5bXXaZxxLJ-53WhQb2RIXx66Rw3oGVaQH9o; Domain=www.tripadvisor.in; Expires=Thu, 25-Nov-2032 16:54:00 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AajR8xvHErc3k7nWhzVPS6shGd0grv0wJKZbD5RpF1Ho2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.in; Expires=Wed, 27-Nov-2024 16:54:00 GMT; Path=/; HttpOnly
__vt=_lpNXeXQJvsVmdnUABQCIf6-ytF7QiW7ovfhqc-AvSG0454v8cVq25T3pP3Ml9aNJRgdz9r0oHu8uUug4_hJu5AMcelsenh9lr53LL9nTM9Pzbb-riYwwiZ32I55vcRGot97EiUJRGoQIrzgyZaZ4AKkzw; Domain=www.tripadvisor.in; Expires=Mon, 28-Nov-2022 17:54:00 GMT; Path=/; Secure; HttpOnly
TASession=V2ID.B783E9E71909C00C0FEB6DA0D1656894*SQ.1*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*TRA.true; Domain=.tripadvisor.in; Path=/
ServerPool=B; Domain=.tripadvisor.in; Path=/
TACds=A.1.11863.2.2022-11-27; Domain=.tripadvisor.in; Expires=Fri, 27-Jan-2023 16:54:00 GMT; Path=/
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 7cb8cf75d35ee1e7609741ff734bc7f0
0e76923bc3a4e4e7b0eab2f201e796f4bbb756be
cad79aa97582bae5daff34c2b77d29359a24fbc393ff8d744372fdf131de9dd8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 32
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:54:00 GMT
Last-Modified: Mon, 28 Nov 2022 16:53:28 GMT
Server: ECS (amb/6B9A)
X-Cache: HIT
Content-Length: 278
maps.googleapis.com/maps/api/js?key=AIzaSyCo98TCKE9JmP926B8em1v9ebFWdF3ialU&ver=5.5.3
200 OK 53 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyCo98TCKE9JmP926B8em1v9ebFWdF3ialU&ver=5.5.3
IP
File type ASCII text, with very long lines (2452)
Hash cdf008029038148eb7864b5e91f61658
5d574e8913a839a27b03207b482358e5434bfc54
9363cd71bfdc41b634cc4390638ca1b9b1f6c8e950910c24cfa4834af1c5e05e
GET /maps/api/js?key=AIzaSyCo98TCKE9JmP926B8em1v9ebFWdF3ialU&ver=5.5.3 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Mon, 28 Nov 2022 16:54:00 GMT
expires: Mon, 28 Nov 2022 17:24:00 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53356
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=20
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 16:11:12 GMT
cache-control: public,max-age=3600
age: 2568
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_9dd44b562c8e4bf728b17525e533e07454f454f4.css?ver=1.2.5
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_9dd44b562c8e4bf728b17525e533e07454f454f4.css?ver=1.2.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_9dd44b562c8e4bf728b17525e533e07454f454f4.css?ver=1.2.5 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_d5296eeb83be2c982530d09cd07ec97d15761576.css?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_d5296eeb83be2c982530d09cd07ec97d15761576.css?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_d5296eeb83be2c982530d09cd07ec97d15761576.css?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_105a8d04f63a65921ae930b265dc6c8a622c622c.css?ver=0.0.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_105a8d04f63a65921ae930b265dc6c8a622c622c.css?ver=0.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_105a8d04f63a65921ae930b265dc6c8a622c622c.css?ver=0.0.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:54:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
themantraone.com/wp-includes/css/dashicons.min56975697.css?ver=5.5.3
200 OK 36 kB URL HTTP/1.1 themantraone.com/wp-includes/css/dashicons.min56975697.css?ver=5.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (58998)
Hash 9702d2e58e0580b53e1540e45c7f6845
73bf8d45272af14250a6793491a41b7dac1c3a15
6645edfcaac3e3e8d8ab100c5c570ea9c1f42f44a9a32f16a2494f6bec4d10af
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dashicons.min56975697.css?ver=5.5.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Tue, 02 Mar 2021 17:55:02 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
themantraone.com/wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0
200 OK 11 kB URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (51051)
Hash 49eecc330d747af753599ace95be251f
5ab2b75e3968712fb113041fd3989ac639a6fea7
1b166b29106c05fbfd5b189cad214663aff880232e0610883aef5d9b0e04ee24
GET /wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:22:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11204
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_5d14f77e458bd1ba2871f60f0e4baaf615761576.css?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_5d14f77e458bd1ba2871f60f0e4baaf615761576.css?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_5d14f77e458bd1ba2871f60f0e4baaf615761576.css?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
www.tripadvisor.com/wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2
200 OK 233 B URL HTTP/2 www.tripadvisor.com/wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2
IP
Hash afbb236f779fa796cf957cd3ed0272c2
efa608eb0c19bbb9df4d8f33058e477139aff5e4
559f2917c9456aa9098ea7bfeb05f866ad4eaaf187d8d6573477a0a24a9345d6
GET /wejs?wtype=excellent&uniq=121&locationId=1043544&lang=en_IN&display_version=2 HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://themantraone.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
expires: 0
cache-control: no-cache,no-store,must-revalidate
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
timing-allow-origin: https://www.tripadvisor.com
vary: Accept-Encoding
content-type: application/x-javascript;charset=UTF-8
content-encoding: gzip
content-length: 233
date: Mon, 28 Nov 2022 16:54:00 GMT
set-cookie: TADCID=_73E5tLFD1rt-j9kABQCFdpBzzOuRA-9xvCxaMyI13HXQ_n-6QHLotYqMaBwGOqkJPIz7f0O-bXmDBAd3fNOnYQVslyYCphp5Sc; Domain=www.tripadvisor.com; Expires=Thu, 25-Nov-2032 16:54:00 GMT; Path=/; Secure; HttpOnly
__vt=cXM9DxKe_1TOnwG3ABQCIf6-ytF7QiW7ovfhqc-AvSG04yJDS1XDTv1Pa_9dKsy-YBFQ1l8ZYSdIx_hBA2LxM8o9dOPG8Wq4zSaBL1TzRkmA5oXT6ShkVAlyE89zDlMhDzY5h450qK2UXUBtWOjVQ0h-; Domain=www.tripadvisor.com; Expires=Mon, 28-Nov-2022 17:54:00 GMT; Path=/; Secure; HttpOnly
_abck=C73C7582B7A3786AF0214C0500635C1A~-1~YAAQBk8kF5/OkHyEAQAAweoovwgT9kJFPMkt735ESAXD12hGat4fJBiJKZHFufS8esN40JGDYBUr2eIKPprrbRuaAAjsgMB6EYKdA0qtQAVOEUvDfDWCXwz/iPyus6j1Xb/46f4n01uNnJM6JO1Fakrlh5S46KbRHJJRMOKSKIH7CqH+r0W8/59MvBotjv8z2kenMg5m7FdAa7ju6sqOeywZ8orQ4Xi+eKGyryZYwf+6bbSh2pAW0iMjy012bZgL+grZ4nNt9300dnn1bjPMrDW5/ZDPMFIJ4mQXU6//37C+dPLD0vYmq5MDahIO5mKN0Txo4EGKxp2a6LqNeTYSw03nmcB+J+Ds7vj8XPSc1kSbus6YgAPo7BbwJJTyZVt93FM=~-1~-1~-1; Domain=.tripadvisor.com; Path=/; Expires=Tue, 28 Nov 2023 16:54:00 GMT; Max-Age=31536000; Secure
bm_sz=9F7C4532CF47F2854EDEF9A72849AE81~YAAQBk8kF6DOkHyEAQAAweoovxH2RtOZs4u/gCJPLj3Q6yBJeYsA9qRqOf8PGbTz9Fy/oHs99l7W2dV8XVdCmQl3fw4/nZlR3+jfchPSZRE9qXNrZzJEGGdijD4NuRKYXF8G501vedLvLP6XutZQeRL9F8ARvRk3NSyG83dMPsGOc7LDFqjyYJAgjxStmdONan+Vnbf7haR+7vpD0h0M+FF6at6MC3rpg6VfcwfZLJZhZa3+2qkyKmx9kgzolwDmdWoWS7WxcGeE01KAB3gjd2y6/Oxq92sFxeMDmShdj9/8potVLj7KuA==~3621689~3617091; Domain=.tripadvisor.com; Path=/; Expires=Mon, 28 Nov 2022 20:54:00 GMT; Max-Age=14400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 7cb8cf75d35ee1e7609741ff734bc7f0
0e76923bc3a4e4e7b0eab2f201e796f4bbb756be
cad79aa97582bae5daff34c2b77d29359a24fbc393ff8d744372fdf131de9dd8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 32
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:54:00 GMT
Last-Modified: Mon, 28 Nov 2022 16:53:28 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
themantraone.com/wp-includes/js/jquery/jquery4a5f4a5f.js?ver=1.12.4-wp
200 OK 43 kB URL HTTP/1.1 themantraone.com/wp-includes/js/jquery/jquery4a5f4a5f.js?ver=1.12.4-wp
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (31997)
Hash db3a0076514643ba73afd55e1a83d176
762702ae91e53968444bd2d9d743539d04c29642
a96be560ba0bbbf51a4d02e4a60f523e1470bfb6a2a72881a77bb8963a343842
GET /wp-includes/js/jquery/jquery4a5f4a5f.js?ver=1.12.4-wp HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Tue, 02 Mar 2021 17:55:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4832
Cache-Control: max-age=149607
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:54:00 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:27:27 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/jquery.serializeJSON/jquery.serializejson.min2e462e46.js?ver=3.9.2
200 OK 2.1 kB URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/jquery.serializeJSON/jquery.serializejson.min2e462e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4539)
Hash 3876b6cb7d30cd3cc663538671d849f5
e023903fda9f06a016ffaabe643053d7f477503b
ca5d2790b43af4361e205613905164d951e8b346a663de260e863181e887f1f9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/motopress-hotel-booking/vendors/jquery.serializeJSON/jquery.serializejson.min2e462e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:21:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2138
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
themantraone.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html
404 Not Found 358 B URL HTTP/1.1 themantraone.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/assets/js/frontend.blocks694e.js?ver=1.6.7
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/assets/js/frontend.blocks694e.js?ver=1.6.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/assets/js/frontend.blocks694e.js?ver=1.6.7 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_53206bba0e42f88d19179310584df569b40f.css?ver=20120629
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_53206bba0e42f88d19179310584df569b40f.css?ver=20120629
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_53206bba0e42f88d19179310584df569b40f.css?ver=20120629 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/vendors/animate.css/animate.min3088.css?ver=3.7.0
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/animate.css/animate.min3088.css?ver=3.7.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/animate.css/animate.min3088.css?ver=3.7.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick.min8162.js?ver=1.9.0
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick.min8162.js?ver=1.9.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/slick/slick/slick.min8162.js?ver=1.9.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/mphb-reviews/assets/js/mphbr.min54f4.js?ver=1.2.5
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/mphb-reviews/assets/js/mphbr.min54f4.js?ver=1.2.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/mphb-reviews/assets/js/mphbr.min54f4.js?ver=1.2.5 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:00 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: giaEU+7Jz4LrbzyBRpmerA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: esI6KFsl7i9O4uqEG+rOBzcWjoo=
themantraone.com/wp-content/themes/luviana/js/navigation1576.js?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/js/navigation1576.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/js/navigation1576.js?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/js/skip-link-focus-fix1576.js?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/js/skip-link-focus-fix1576.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/js/skip-link-focus-fix1576.js?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/js/functions1576.js?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/js/functions1576.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/themes/luviana/js/functions1576.js?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-includes/js/wp-embed.min5697.js?ver=5.5.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-includes/js/wp-embed.min5697.js?ver=5.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min5697.js?ver=5.5.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/vendors/lodash.unescape/unescape.minf39e.js?ver=4.0.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/lodash.unescape/unescape.minf39e.js?ver=4.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/getwid/vendors/lodash.unescape/unescape.minf39e.js?ver=4.0.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/jetpack/_inc/build/spin.min4e44.js?ver=1.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/jetpack/_inc/build/spin.min4e44.js?ver=1.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/_inc/build/spin.min4e44.js?ver=1.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/jetpack/_inc/build/jquery.spin.min4e44.js?ver=1.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/jetpack/_inc/build/jquery.spin.min4e44.js?ver=1.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/jetpack/_inc/build/jquery.spin.min4e44.js?ver=1.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/html
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:54:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:54:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5961
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:54:01 GMT
Connection: keep-alive
themantraone.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.mincb8b.js?ver=20190102
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.mincb8b.js?ver=20190102
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.mincb8b.js?ver=20190102 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 67935
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:42:14 GMT
age: 69107
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
themantraone.com/wp-content/plugins/getwid/vendors/fontawesome-free/css/all.mindebadeba.css?ver=5.5.0
200 OK 11 kB URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/fontawesome-free/css/all.mindebadeba.css?ver=5.5.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (51051)
Hash 49eecc330d747af753599ace95be251f
5ab2b75e3968712fb113041fd3989ac639a6fea7
1b166b29106c05fbfd5b189cad214663aff880232e0610883aef5d9b0e04ee24
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/fontawesome-free/css/all.mindebadeba.css?ver=5.5.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:21:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11204
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I6egDH0h7D08HhaoQHQ0vgghBhPfje2lGIbnWD-t7p4txzHsFxmZfg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 10:31:22 GMT
age: 22959
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 67935
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 10:13:33 GMT
age: 24028
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a6e5f60b87d3879606a6707feb37a73
373c96c2e0006d70954d4b4ebd850f62f558e92c
1ae48f692f44d357e21eec708b46f22c36a3de21be8d0f1c2035d197e0aa89de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9546
x-amzn-requestid: 60e352b5-ab38-4975-bf26-500f0a639a2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFfulExwIAMFzQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637edff6-1364912f7fd292da6453a83e;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 03:07:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VJEv2ld4UX33FTfVpUHNhOzTtv17G-PrI-eBKS2ofhQ5dx_Smuz8Bw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 05:51:32 GMT
age: 39749
etag: "373c96c2e0006d70954d4b4ebd850f62f558e92c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick-theme.min81628162.css?ver=1.9.0
200 OK 902 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick-theme.min81628162.css?ver=1.9.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2340), with no line terminators
Hash adff03ad9d190372403c64a5db79c413
afa7eaa2c527991af7d369baf99791ca2e8be02f
1e7842bffbd87b702b51cfa3df35c30d65efbef0f1b5a9cd1028613ce539358d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/slick/slick/slick-theme.min81628162.css?ver=1.9.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:22:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 902
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick.min81628162.css?ver=1.9.0
200 OK 488 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick.min81628162.css?ver=1.9.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1327), with no line terminators
Hash 674d28808ac365e874d430ec4c9eb3c6
e1b672e8e40da6d17a060f8cc6e3270f2df73a36
af474205826cd91057058eee28bc6dd67560822d0a77f4f76e62f293a61dbe2a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/slick/slick/slick.min81628162.css?ver=1.9.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:22:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 488
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
themantraone.com/wp-content/plugins/getwid/vendors/magnific-popup/magnific-popup.minf488f488.css?ver=1.1.0
200 OK 1.8 kB URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/magnific-popup/magnific-popup.minf488f488.css?ver=1.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5235), with no line terminators
Hash 4998ed91e081bbea5deae842ff73832a
78ae3d2b08d6e35eb8c08d9e7a2cfc80ae3b64a2
b3b438a9984a307d0a930306b38983559f2b8bda16d825279f9a67973ae76bc9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/magnific-popup/magnific-popup.minf488f488.css?ver=1.1.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:21:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1817
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
static.tacdn.com/img2/brand_refresh/Tripadvisor_lockup_horizontal_secondary_registered.svg
200 OK 2.3 kB URL HTTP/2 static.tacdn.com/img2/brand_refresh/Tripadvisor_lockup_horizontal_secondary_registered.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash e8b5d8fed8c46e36ccce67599df9f8f9
2f91a70ad275d011758d3447042163757e0aa79e
4e96c4d8943fa1ca408a68c94d579ccd539bbfdfbf9195c694203786dcc4db0e
GET /img2/brand_refresh/Tripadvisor_lockup_horizontal_secondary_registered.svg HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Thu, 02 Jul 2020 16:01:49 GMT
cache-control: max-age=2592000
expires: Thu, 21 Jul 2022 02:09:22 GMT
timing-allow-origin: *
content-type: image/svg+xml
content-encoding: gzip
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:54:01 GMT
via: 1.1 varnish
age: 917068
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 22291
x-timer: S1669654441.337197,VS0,VE0
vary: Accept-Encoding
content-length: 2320
X-Firefox-Spdy: h2
themantraone.com/wp-content/themes/luviana/images/header_default.png
200 OK 1.0 kB URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/images/header_default.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 137 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash 9753062e2694f363db50936af495b15d
e6d1966d78ac5ec5b49cbea8aa9dd4a6c5e825ef
25706865007e7f16baaebb15a9e7c913fdf4717cb3d18ea1e0dced57d4fd6164
GET /wp-content/themes/luviana/images/header_default.png HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:21:42 GMT
Accept-Ranges: bytes
Content-Length: 1003
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/png
themantraone.com/wp-content/uploads/sites/27/2019/07/image_placeholder-copy-5.png
200 OK 7.0 kB URL HTTP/1.1 themantraone.com/wp-content/uploads/sites/27/2019/07/image_placeholder-copy-5.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1170 x 1030, 8-bit/color RGBA, non-interlaced\012- data
Hash e9788f405fe1a29599552f86caf473bc
b6291a9f04006387ae5e774f0730c317639db1c1
a5dd70a4b5759befb90390d5a483829e9a74036d30dc7d4a525e4e5a14273e77
GET /wp-content/uploads/sites/27/2019/07/image_placeholder-copy-5.png HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:23:06 GMT
Accept-Ranges: bytes
Content-Length: 7038
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
themantraone.com/trip.png
200 OK 1.4 kB URL HTTP/1.1 themantraone.com/trip.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a2cefcd2160291d52d891b5861b1fed4
820c2e028308216242033028a2d0bf77a89dc62b
fcf7014925b72e5205bc73d07e22b77e66b0f50658bd5eb9bd2658456a0d70af
GET /trip.png HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sun, 21 Mar 2021 01:18:20 GMT
Accept-Ranges: bytes
Content-Length: 1357
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
themantraone.com/fb.png
200 OK 804 B IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 2a530f3c0267bab04c856aa3d9f2332d
86d89bf74d78aea422bef50eda3493c4e5640714
320fa31ca47a64d1820604b976d3ea6d9660e2f848b6324d8d7cc41067b11486
GET /fb.png HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sun, 21 Mar 2021 01:18:22 GMT
Accept-Ranges: bytes
Content-Length: 804
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
themantraone.com/insta.png
200 OK 3.0 kB URL HTTP/1.1 themantraone.com/insta.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b1673ab8b5d9615be729e6391e6e8cc
9baa0c3ce8a75c434d751e6cef6e3f859dc5df5c
5afca3127c5a5dbd8e1a2aabec6b88e99d5e63b501a063049651c913cb627b96
GET /insta.png HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sun, 21 Mar 2021 01:18:20 GMT
Accept-Ranges: bytes
Content-Length: 3001
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
www.tripadvisor.in/WidgetEmbed-excellent?lang=en_IN&locationId=1043544&display_version=2&uniq=121
200 OK 3.3 kB URL HTTP/2 www.tripadvisor.in/WidgetEmbed-excellent?lang=en_IN&locationId=1043544&display_version=2&uniq=121
IP
Hash b53c6fc803bec81597147191f7077d43
426a4cefb5ccb55a7068293bbaa98cf32f01537d
1c37ae89a6056c78622e63bdd54a582eafa738558027af2ed0b3f697ca3dbd86
GET /WidgetEmbed-excellent?lang=en_IN&locationId=1043544&display_version=2&uniq=121 HTTP/1.1
Host: www.tripadvisor.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
content-language: en-IN
vary: User-Agent,Accept-Encoding
expires: 0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
timing-allow-origin: https://www.tripadvisor.com
content-type: text/javascript;charset=UTF-8
content-encoding: gzip
content-length: 3336
date: Mon, 28 Nov 2022 16:54:01 GMT
set-cookie: TADCID=KJ0bTey1-iWZUgGGABQCFdpBzzOuRA-9xvCxaMyI13HXQ-OaFPv_W8NOcahtsgiY2zYKoXzN-wJNzML6Up1LIGCCx-27p9EQXnU; Domain=www.tripadvisor.in; Expires=Thu, 25-Nov-2032 16:54:01 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3ApJ2haVufrc7k7nWhzVPS6shGd0grv0wJiOY7K5NZ%2Fyc2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.in; Expires=Wed, 27-Nov-2024 16:54:01 GMT; Path=/; HttpOnly
__vt=yunLh6JiKwZ3b8NNABQCIf6-ytF7QiW7ovfhqc-AvSG04yGP3GqwM9UsSGC3wAjvo7m7nOoxqvPuiZsozcbFBUncWwSOusvFECtvstz6lDVrNtbNB5WH8wJ8jnKYhPSQRCv-WSjPOGfi6GnlSDh10B1jrA; Domain=www.tripadvisor.in; Expires=Mon, 28-Nov-2022 17:54:01 GMT; Path=/; Secure; HttpOnly
TASSK=enc%3AAKaK%2B%2Bd8A5u7pNJPZ2334exWfw9E0z0iN1ZDNHwv%2BvgupxWemj3STh1xUNdWbRseqH7EQqRVI8O6%2F4ELw2jb3OdMofxh3UzXCjaIxscjJ42Oi335NPHIcF1DVMnRHQq5Eg%3D%3D; Domain=www.tripadvisor.in; Expires=Sat, 27-May-2023 16:54:01 GMT; Path=/; HttpOnly
TASession=V2ID.7E6B303D171B49B59BBB04923A61E028*SQ.1*LS.WidgetEmbed-excellent*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*DF.0*TRA.true; Domain=.tripadvisor.in; Path=/
SRT=TART_SYNC; Domain=www.tripadvisor.in; Expires=Mon, 28-Nov-2022 17:24:01 GMT; Path=/
ServerPool=B; Domain=.tripadvisor.in; Path=/
PMC=V2*MS.31*MD.20221128*LD.20221128; Domain=www.tripadvisor.in; Expires=Wed, 27-Nov-2024 16:54:01 GMT; Path=/; Secure; HttpOnly
TART=%1%enc%3A5O51oc1T0urhlOx9%2BLgars9t%2F6THnvi8LG14ExTiyW%2BtdmFCD%2Bf3E5fwTWhRNYybRsNr41gHGgI%3D; Domain=www.tripadvisor.in; Expires=Sat, 03-Dec-2022 16:54:01 GMT; Path=/; HttpOnly
TATravelInfo=V2*A.2*MG.-1*HP.2*FL.3*RS.1; Domain=.tripadvisor.in; Expires=Mon, 12-Dec-2022 16:54:01 GMT; Path=/
TAUD=RDD-1669654441454-2022_11_28; Domain=.tripadvisor.in; Expires=Mon, 12-Dec-2022 16:54:01 GMT; Path=/
TASID=7E6B303D171B49B59BBB04923A61E028; Domain=www.tripadvisor.in; Expires=Mon, 28-Nov-2022 17:24:01 GMT; Path=/; Secure
X-Firefox-Spdy: h2
static.tacdn.com/css2/build/concat/t4b_widget_excellent-v23276556766a.css
200 OK 2.1 kB URL HTTP/2 static.tacdn.com/css2/build/concat/t4b_widget_excellent-v23276556766a.css
IP
File type ASCII text, with very long lines (6571)
Hash 8db96ea18c981c0684e990d8c38f70a3
45271bc23691099ab6ac26a1fdbe6fb4e2555b59
747a7ded50862d7870ce58f7fe3878aadc647ab7d9bffcf71821e5ca8e5328ca
GET /css2/build/concat/t4b_widget_excellent-v23276556766a.css HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Sat, 29 Oct 2022 11:29:06 GMT
cache-control: max-age=31536000, immutable
expires: Fri, 03 Nov 2023 04:49:12 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: text/css
content-encoding: gzip
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:54:01 GMT
via: 1.1 varnish
age: 2203489
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 80
x-timer: S1669654442.580138,VS0,VE0
vary: Accept-Encoding
content-length: 2147
X-Firefox-Spdy: h2
static.tacdn.com/js3/build/concat/widget/cdswidgets_min-c-v2395114504a.js
200 OK 641 B URL HTTP/2 static.tacdn.com/js3/build/concat/widget/cdswidgets_min-c-v2395114504a.js
IP
File type ASCII text, with very long lines (1625)
Hash 4b8d1ddd273f0a0a2e1f8b06c9baeefa
d958d80355fc42bf35f2d83d6dd62693f56e2658
48683eb9ca0452e0ed42bab3866b9ef99a690c89c97156bdbabde15a861a7ec2
GET /js3/build/concat/widget/cdswidgets_min-c-v2395114504a.js HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Fri, 04 Mar 2022 12:32:49 GMT
cache-control: max-age=31536000, immutable
expires: Sat, 18 Mar 2023 00:21:17 GMT
content-encoding: gzip
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/x-javascript
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:54:01 GMT
via: 1.1 varnish
age: 22091561
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 13570
x-timer: S1669654442.580243,VS0,VE0
vary: Accept-Encoding
content-length: 641
X-Firefox-Spdy: h2
themantraone.com/images/mantra-logo.png
200 OK 16 kB URL HTTP/1.1 themantraone.com/images/mantra-logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 612 x 462, 8-bit/color RGBA, non-interlaced\012- data
Hash 59ed9e57f73cef734fbd1ef08451fb85
794ead4a329798f56783da4db2437c34aa22fc8f
0655e6425d0528b669a3751a02041702d204ece5a41b3269e428916cfd293f92
GET /images/mantra-logo.png HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:39:04 GMT
Accept-Ranges: bytes
Content-Length: 16090
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
themantraone.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html
404 Not Found 358 B URL HTTP/1.1 themantraone.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html
cdn.livechatinc.com/tracking.js
301 Moved Permanently 0 B URL HTTP/1.1 cdn.livechatinc.com/tracking.js
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn.livechatinc.com/tracking.js
Cache-Control: max-age=28800
Expires: Tue, 29 Nov 2022 00:54:01 GMT
Date: Mon, 28 Nov 2022 16:54:01 GMT
Connection: keep-alive
Content-Type: application/javascript; charset=utf-8
Access-Control-Allow-Origin: *
cdn.livechatinc.com/tracking.js
200 OK 26 kB URL HTTP/2 cdn.livechatinc.com/tracking.js
IP
ASN #20940 Akamai International B.V.
Hash fdb3fbabc9d0fdd42c1230d360cd2d44
3968a4d120665750710b64068c0af871d1a149d5
b774ad6e513f484794d2f3985d3b42667e11c38c6def308bcce6b3d81ebff9c7
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://themantraone.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 17 Nov 2022 13:08:42 GMT
x-amz-version-id: XiT9l9I6GGKdmfwcYLWex5TUwoVUOWV5
server: AmazonS3
content-encoding: br
etag: W/"72abe41f23b1a5d3b25350cc7025a805"
vary: Accept-Encoding
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: D3KEkfL4U2Yk1ikvSs7spz9_JmtUYKdfxg54PQ9go4a6WarOC0Sz5A==
content-length: 26070
cache-control: max-age=28800
expires: Tue, 29 Nov 2022 00:54:01 GMT
date: Mon, 28 Nov 2022 16:54:01 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_53206bba0e42f88d19179310584df569b40f.css?ver=20120629
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/cache/autoptimize/27/css/autoptimize_single_53206bba0e42f88d19179310584df569b40f.css?ver=20120629
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/autoptimize/27/css/autoptimize_single_53206bba0e42f88d19179310584df569b40f.css?ver=20120629 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/vendors/animate.css/animate.min3088.css?ver=3.7.0
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/animate.css/animate.min3088.css?ver=3.7.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/animate.css/animate.min3088.css?ver=3.7.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/assets/js/frontend.blocks694e.js?ver=1.6.7
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/assets/js/frontend.blocks694e.js?ver=1.6.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/assets/js/frontend.blocks694e.js?ver=1.6.7 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:02 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: text/html
api.livechatinc.com/v3.3/customer/action/get_dynamic_configuration?license_id=9531830&url=http%3A%2F%2Fthemantraone.com%2Freservation.html&group_id=17&channel_type=code&jsonp=__g8iz7i8c01
200 OK 374 B URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_dynamic_configuration?license_id=9531830&url=http%3A%2F%2Fthemantraone.com%2Freservation.html&group_id=17&channel_type=code&jsonp=__g8iz7i8c01
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (374), with no line terminators
Hash 5249dda39836b04b75903eecea82fbe1
d1fc7a1975b0a24c8b03c317f34e868639b438f8
4850a550911a4d7c6d31aa805be095bef244d73f7ff726d1b70f3719d150bbbf
GET /v3.3/customer/action/get_dynamic_configuration?license_id=9531830&url=http%3A%2F%2Fthemantraone.com%2Freservation.html&group_id=17&channel_type=code&jsonp=__g8iz7i8c01 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-security-policy: frame-ancestors http://themantraone.com/;
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
x-frame-options: allow-from http://themantraone.com/
content-length: 374
date: Mon, 28 Nov 2022 16:54:02 GMT
X-Firefox-Spdy: h2
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:02 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: text/html
api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=9531830&version=2103.15.15.6376.650.540.204.35.9.111.7.58.0&group_id=17&jsonp=__lc_static_config
200 OK 2.5 kB URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=9531830&version=2103.15.15.6376.650.540.204.35.9.111.7.58.0&group_id=17&jsonp=__lc_static_config
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7236), with no line terminators
Hash 8a65921006695b4114581b9137955bd1
2bda132d2d2c2b69445ec8d67ab8549ed5021c28
ee602b4d593bee0a95c35e3d12cc3b7b9f99d72415607b89a970860b39080f66
GET /v3.3/customer/action/get_configuration?license_id=9531830&version=2103.15.15.6376.650.540.204.35.9.111.7.58.0&group_id=17&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
cache-control: public, max-age=600
expires: Mon, 28 Nov 2022 17:04:02 GMT
date: Mon, 28 Nov 2022 16:54:02 GMT
content-length: 2467
X-Firefox-Spdy: h2
themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-regular-400.html
200 OK 685 kB URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-regular-400.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 14844, version 1.0\012- data
Size 685 kB (685441 bytes)
Hash e0027ed4124074f7297b4d8a06ba189c
c1772f79e79cc83fffca55dccd0fc42657478fdf
15ec01b2d3fc57e7850f81565416e61ec9b6646c1d185d92d7991d2eecfbbfc7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/assets/font-awesome/webfonts/fa-regular-400.html HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://themantraone.com/wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 09 Jun 2021 13:42:42 GMT
Accept-Ranges: bytes
Content-Length: 685441
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:02 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-regular-400.woff
200 OK 18 kB URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-regular-400.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 18112, version 1.0\012- data
Hash 0b5e3a5451fc62d9023ccafc85bc89db
0a34c55ac1ae90705d1ef2c4a643563215060f1c
f101b8f70e36be2e9004222875e9fd45b263f72769c68e25e3c7525d3871728b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/assets/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://themantraone.com/wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:02 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:22:08 GMT
Accept-Ranges: bytes
Content-Length: 18112
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: font/woff
themantraone.com/wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min2e46.js?ver=3.9.2
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min2e46.js?ver=3.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min2e46.js?ver=3.9.2 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:02 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/mphb-reviews/assets/js/mphbr.min54f4.js?ver=1.2.5
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/mphb-reviews/assets/js/mphbr.min54f4.js?ver=1.2.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/mphb-reviews/assets/js/mphbr.min54f4.js?ver=1.2.5 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:02 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick.min8162.js?ver=1.9.0
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/slick/slick/slick.min8162.js?ver=1.9.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/getwid/vendors/slick/slick/slick.min8162.js?ver=1.9.0 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:03 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/js/navigation1576.js?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/js/navigation1576.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/js/navigation1576.js?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:03 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/js/skip-link-focus-fix1576.js?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/js/skip-link-focus-fix1576.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/js/skip-link-focus-fix1576.js?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:03 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/js/functions1576.js?ver=1.2.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/js/functions1576.js?ver=1.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/themes/luviana/js/functions1576.js?ver=1.2.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:03 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-includes/js/wp-embed.min5697.js?ver=5.5.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-includes/js/wp-embed.min5697.js?ver=5.5.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min5697.js?ver=5.5.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:03 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=61
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/getwid/vendors/lodash.unescape/unescape.minf39e.js?ver=4.0.1
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/getwid/vendors/lodash.unescape/unescape.minf39e.js?ver=4.0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/getwid/vendors/lodash.unescape/unescape.minf39e.js?ver=4.0.1 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:03 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=60
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/jetpack/_inc/build/spin.min4e44.js?ver=1.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/jetpack/_inc/build/spin.min4e44.js?ver=1.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/_inc/build/spin.min4e44.js?ver=1.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:04 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=59
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/jetpack/_inc/build/jquery.spin.min4e44.js?ver=1.3
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/jetpack/_inc/build/jquery.spin.min4e44.js?ver=1.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /wp-content/plugins/jetpack/_inc/build/jquery.spin.min4e44.js?ver=1.3 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:04 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=58
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.mincb8b.js?ver=20190102
404 Not Found 358 B URL HTTP/1.1 themantraone.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.mincb8b.js?ver=20190102
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.mincb8b.js?ver=20190102 HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:04 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=57
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/favicon.ico
404 Not Found 358 B URL HTTP/1.1 themantraone.com/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /favicon.ico HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://themantraone.com/reservation.html
HTTP/1.1 404 Not Found
Date: Mon, 28 Nov 2022 16:54:04 GMT
Server: Apache
Last-Modified: Sat, 13 Aug 2022 11:24:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=56
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-solid-900.html
200 OK 744 kB URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-solid-900.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 73852, version 1.0\012- data
Size 744 kB (744467 bytes)
Hash bd1e2b426bbf695845f2538610070544
36de8a3476b05d421080b5d282c9563965ea8c6a
210e949156309fa5649b2300a6352cf0333e7d8ee764a3c05776abb7089bc61c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/assets/font-awesome/webfonts/fa-solid-900.html HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://themantraone.com/wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:01 GMT
Server: Apache
Last-Modified: Wed, 09 Jun 2021 13:40:44 GMT
Accept-Ranges: bytes
Content-Length: 744467
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html
themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-solid-900.woff
200 OK 95 kB URL HTTP/1.1 themantraone.com/wp-content/themes/luviana/assets/font-awesome/webfonts/fa-solid-900.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 95436, version 1.0\012- data
Hash bcb927a742a8370b76642fd1a9a749c0
b4db0bb64903b689ad40b7cf46dc01941dce1ec0
8fb19633f125ca466a45da9e4cf291d8b9519dd74c214f99dde835ef83f3ab96
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/luviana/assets/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: themantraone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://themantraone.com/wp-content/themes/luviana/assets/font-awesome/css/all.mindebadeba.css?ver=5.5.0
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:54:06 GMT
Server: Apache
Last-Modified: Wed, 10 Mar 2021 16:22:10 GMT
Accept-Ranges: bytes
Content-Length: 95436
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: font/woff
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b0bd385532089b45a14e461abbecc1af
3da359b1ba09138a425094715b9f3a2f8d0257fe
803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:16:08 GMT
age: 67080
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
themes.getmotopress.com/luviana/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
200 OK 0 B URL HTTP/2 themes.getmotopress.com/luviana/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
IP
GET /luviana/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3 HTTP/1.1
Host: themes.getmotopress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://themantraone.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 16:54:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 08 Dec 2021 20:42:42 GMT
etag: W/"4705-5d2a88812b204"
expires: Wed, 15 Nov 2023 10:52:59 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QPN0EGKmwBIOki1mdTjmsbk%2B1au4ttnOtQGUvfS7Unc7CGpoJVjWGeMJdhuPF2Ho2xivBtwt1uTgQF3XI4DevaQ96RYnAiS1VId7S4RH%2FN%2B4YaHWaisPHqVNCLaVC9qYf7qw7B6luh8yPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77149f7d39a7b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
162.241.85.70
23.36.77.32
93.184.220.29
151.101.86.83
104.21.52.24