r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2812
Expires: Thu, 02 Feb 2023 03:07:20 GMT
Date: Thu, 02 Feb 2023 02:20:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11810
Expires: Thu, 02 Feb 2023 05:37:18 GMT
Date: Thu, 02 Feb 2023 02:20:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 01:36:02 GMT
content-type: application/json
age: 2666
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4638
Expires: Thu, 02 Feb 2023 03:37:46 GMT
Date: Thu, 02 Feb 2023 02:20:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ErlmOBSa4KvmMVaayns1GW359NQM/er3sN8uDuzX5YPuLzrg7j0Vhi6haG9BM/+BH4L6s6L+keU=
x-amz-request-id: A05MSDXKY3K2ZNTW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 01:51:47 GMT
age: 1721
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 02:20:28 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 01:49:05 GMT
age: 1883
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10040
Expires: Thu, 02 Feb 2023 05:07:49 GMT
Date: Thu, 02 Feb 2023 02:20:29 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ovyJY7OZGvZj90sLtIh1cA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RZb1HyxLMy9FS8OVwNSVNN/bMyQ=
godavaricarrentals.com/2018/04
301 Moved Permanently 0 B URL HTTP/1.1 godavaricarrentals.com/2018/04
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /2018/04 HTTP/1.1
Host: godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 02 Feb 2023 02:20:29 GMT
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Location: http://www.godavaricarrentals.com/2018/04
Vary: User-Agent
Server: fbs
Set-Cookie: SPSI=ab740bc902d77a65124a9daf53c947e5; path=/; HttpOnly; SameSite=Lax;
SPSE=qqUwEAVbFrorwkSfOfkIt37XmpNqkcHflBOvgv3hN/w1ycgYySdkSRud93BFG+A6GtIDZuE0on3zVc/38sjgeg==; path=/; HttpOnly; SameSite=Lax;
spcsrf=ef98731c88d0249845f9cfdc0ce6d2b9; path=/; SameSite=Strict; HttpOnly; expires=Thu, 02-Feb-23 04:20:28 GMT
adOtr=obsvl; path=/; SameSite=Lax; expires=Thu, 2 Aug 2001 20:47:11 UTC
UTGv2=D-h49ad36b9319f186a900a643741cfeee4b30; path=/; SameSite=Lax; expires=Tue, 01-Aug-23 02:20:28 GMT
Access-Control-Allow-Origin: *
X-HW: 1675304428.cds245.sk1.h2,1675304428.cds225.sk1.sc,1675304429.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304429.cds225.sk1.p
Connection: keep-alive
Content-Length: 0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3624
Expires: Thu, 02 Feb 2023 03:20:54 GMT
Date: Thu, 02 Feb 2023 02:20:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3624
Expires: Thu, 02 Feb 2023 03:20:54 GMT
Date: Thu, 02 Feb 2023 02:20:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3624
Expires: Thu, 02 Feb 2023 03:20:54 GMT
Date: Thu, 02 Feb 2023 02:20:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3624
Expires: Thu, 02 Feb 2023 03:20:54 GMT
Date: Thu, 02 Feb 2023 02:20:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 395bb0f71f9eba82f5ca23548d08900f
b1fada280c7ea3eb775a6fa46ce173a51eb045f5
7443babb69532e1ee3ee779e05ad4f62de2c5bf62548bcb5702f8290a527664c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11367
x-amzn-requestid: 67702c15-9a68-46ec-95e5-efb57f08e2f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5OGfBoAMF3Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6e-033182ba55fdd0230ad5a270;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ybz4mmNUwsKOkpz6GFm4nLz7iGX5gJ--EiUjqrs8G92GBLn6qaF7IQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:57:51 GMT
age: 15759
etag: "b1fada280c7ea3eb775a6fa46ce173a51eb045f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 91987222-d376-4099-a4e9-5f877b5212be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzO2FSDIAMFktg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce325e-281a7e062ee3039d42ae8f83;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:08:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SEH32iK4aCkxhxQyu3fSlW8uVM1Oj5hwnl2U09k_THEOdAqdEeVMJw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:03:43 GMT
age: 15407
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F868f7eb5-a922-48b3-b59c-21db2389409e.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F868f7eb5-a922-48b3-b59c-21db2389409e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6790e3bf4d10b1ffba32a22dc588c640
cdae35517dfea800134393a1095f44462bc428a5
4f4132588ee7337fff24da64b89e43b277c4ef0a2646acfba37aea08fc0f4256
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F868f7eb5-a922-48b3-b59c-21db2389409e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9416
x-amzn-requestid: acc48967-4cc1-4bfd-bc33-7bcefd8e6547
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKVGjqIAMFa2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-1d1cd4de0a30760e792d32e5;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: byLFLKpRZa_blxNi2wh_ft4Ule-zNiZtSih_Quv-9BgKS87Y-wJlTA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:00:40 GMT
age: 15590
etag: "cdae35517dfea800134393a1095f44462bc428a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df4a4906103a8f409c066b1cded71384
22847e3926db3e3d5f6b529297a4abe8b377c3a6
84a14b73b2cc7f4641eaa5539cbee0a109ae2b05cf88d06797a2b00c8d4f0c43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9221
x-amzn-requestid: 209c2ad4-7a1f-4867-bf98-4ca8621111a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTBFv5IAMFgqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-1627a9d603c69f7760ad013b;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kAkcQOKAvuq3k-X081MLCqon-cnQJqGryVeE0fwX0a7bcXgJlySIvg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:21:38 GMT
age: 14332
etag: "22847e3926db3e3d5f6b529297a4abe8b377c3a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41c44051cc3b4c69924df66048e7566b
5c6a12595c3f6005fec4baa84b16575951e72178
72dff70bcb417c088aba013a486e1dbabe099b40fb718a283f1ba220b142b848
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7450
x-amzn-requestid: 1b3ef150-9b12-4b8b-94e6-0d6debbd24ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTDFmPoAMF-UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-0fea883b0ce1a1b933dc2be8;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qON7fRZ1XPCkl7ldiGagd0UcPynLKMzysXr8LZSRvS1ily9cN5w_wA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:22:55 GMT
age: 14255
etag: "5c6a12595c3f6005fec4baa84b16575951e72178"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23ac16a6-b0c6-4c81-9bd1-78ee332bf49a.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23ac16a6-b0c6-4c81-9bd1-78ee332bf49a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ceb09fa3caa0fcda4a6314141e2d019
d08f43956f6859e4c2385231bb5506262257445f
a2100701c69f86920b14714b19ec14db9ebfd91000f0ec2397b8f27d981bc1ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23ac16a6-b0c6-4c81-9bd1-78ee332bf49a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14593
x-amzn-requestid: 796fc590-5a08-4765-b861-e5f707e4d7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdLoFHQoAMFaAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbe3-3f93635c337e77e453bba394;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gYo5IyA5mM2B5nw6O2QkkZ6-go2CzG8Nwb_pWSixGplAl7LsbmWUiQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:55:43 GMT
age: 15887
etag: "d08f43956f6859e4c2385231bb5506262257445f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.godavaricarrentals.com/2018/04
404 Not Found 18 kB URL HTTP/1.1 www.godavaricarrentals.com/2018/04
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (24898), with CRLF, LF line terminators
Hash 8a0c6944f63a5c6bc7ee2f07efe1c9f5
14ad4c3712aa17e83d04de2a10554ffdb083f355
5241a827f1dd36e955d9f67229c496d5ce894515be1d5205ef44bffdf9c86311
Analyzer Verdict Alert fortinet Malware
GET /2018/04 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Thu, 02 Feb 2023 02:20:31 GMT
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.godavaricarrentals.com/wp-json/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Vary: Accept-Encoding,User-Agent
Server: fbs
Set-Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; path=/; HttpOnly; SameSite=Lax;
SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; path=/; HttpOnly; SameSite=Lax;
spcsrf=e95f096452ff3dae9174c576c87e4d68; path=/; SameSite=Strict; HttpOnly; expires=Thu, 02-Feb-23 04:20:29 GMT
adOtr=obsvl; path=/; SameSite=Lax; expires=Thu, 2 Aug 2001 20:47:11 UTC
UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; path=/; SameSite=Lax; expires=Tue, 01-Aug-23 02:20:29 GMT
sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; path=/; SameSite=Strict; HttpOnly; expires=Thu, 02-Feb-23 02:25:31 GMT
Access-Control-Allow-Origin: *
X-HW: 1675304429.cds249.sk1.h2,1675304429.cds263.sk1.sc,1675304431.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1675304431.cds263.sk1.p
Connection: keep-alive
www.godavaricarrentals.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.4.0.5
200 OK 12 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.4.0.5
IP
File type ASCII text, with very long lines (65371)
Hash d12aeeb7bb447933596a67caa448af0b
479285d946526cf0d71dc072dd1f7fe2aa6ac137
1f1ad0763720b9917df234222a6c45fe670554960a7b27a0f0d6ad22607a9800
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.4.0.5 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:31 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:14:57 GMT
Upgrade: h2,h2c
ETag: "130fd-5dc732bd018c6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds249.sk1.h2,1675304431.cds001.sk1.sc,1675304431.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304431.cds001.sk1.p
Connection: keep-alive
Content-Length: 11776
www.godavaricarrentals.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 189 B URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:31 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Wed, 02 Nov 2022 09:12:40 GMT
Upgrade: h2,h2c
ETag: "d9-5ec793e199649-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds214.sk1.h2,1675304431.cds239.sk1.sc,1675304431.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304431.cds239.sk1.p
Connection: keep-alive
Content-Length: 189
www.godavaricarrentals.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/css/wpautoterms.css?ver=6.1.1
200 OK 195 B URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/css/wpautoterms.css?ver=6.1.1
IP
Hash bd0b3fc172b6a51ad0365ab923eae0e8
310b56dffb971b8c0cebf62abf2717a2b9b9388e
1b018b8dbf4bc962ab10a89fbff6a08f8c73e01f8c97259dfe909cd221b9fbef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/auto-terms-of-service-and-privacy-policy/css/wpautoterms.css?ver=6.1.1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:31 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:14:34 GMT
Upgrade: h2,h2c
ETag: "223-5dc732a68f226-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds248.sk1.h2,1675304431.cds251.sk1.sc,1675304431.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1675304431.cds251.sk1.p
Connection: keep-alive
Content-Length: 195
www.godavaricarrentals.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6
200 OK 972 B URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6
IP
Hash 8bf268dfcca7cb20719b7ea14373ef4a
58bd839bbf0e8cc082f0a488b538b4ec71bebd2e
eece4a14939273c7af07bce8bab3a6cfc2c9de44c0eea82cc886abac13cb3870
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:31 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:14:17 GMT
Upgrade: h2,h2c
ETag: "aab-5dc73296c12ea-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds003.sk1.h2,1675304431.cds205.sk1.sc,1675304431.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1675304431.cds205.sk1.p
Connection: keep-alive
Content-Length: 972
www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 7.1 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
File type ASCII text, with very long lines (30837)
Hash 2a2c987c48fb65bb0e78fa2a37120537
ede7a4d5da37f053251e8b8a33be2a23a660473f
3d3136cdfced0eee9b7766b7a17a591f6fb3ba480e71b8930acbea4db4ab71d1
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Mon, 11 Apr 2022 06:58:10 GMT
Upgrade: h2,h2c
ETag: "7917-5dc5b77a05f05-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds248.sk1.h2,1675304431.cds225.sk1.sc,1675304432.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304432.cds225.sk1.p
Connection: keep-alive
Content-Length: 7052
www.godavaricarrentals.com/wp-content/themes/posterity/js/light-gallery/css/lg-transitions.min.css?ver=1.6.9
200 OK 1.9 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/light-gallery/css/lg-transitions.min.css?ver=1.6.9
IP
File type ASCII text, with very long lines (39108), with no line terminators
Hash 22d029fe1cae2ea0c4ce1c58a04b24b2
1588d288217c52f18c98ee317168c35cd45e0cf5
2fd59850b451f904eac0077bf5268d645d3898f0fd0d4ccbd60415e159104d87
GET /wp-content/themes/posterity/js/light-gallery/css/lg-transitions.min.css?ver=1.6.9 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "98c4-5dc73b6ca868d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds249.sk1.h2,1675304431.cds249.sk1.sc,1675304432.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1675304432.cds249.sk1.p
Connection: keep-alive
Content-Length: 1930
www.godavaricarrentals.com/wp-content/themes/posterity/js/light-gallery/css/lightgallery.min.css?ver=1.6.9
200 OK 3.8 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/light-gallery/css/lightgallery.min.css?ver=1.6.9
IP
File type ASCII text, with very long lines (20458), with no line terminators
Hash a6762b6c355949520f6cb496ebea5735
fe66156bfb115d33236d4900107343a29f6d9e03
d76ea3c3446974d133465c1210c7a824f6cd8267823e9c1ef5fb31d4488c7e7d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/light-gallery/css/lightgallery.min.css?ver=1.6.9 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "4fea-5dc73b6ca8a75-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds214.sk1.h2,1675304431.cds247.sk1.sc,1675304432.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304432.cds247.sk1.p
Connection: keep-alive
Content-Length: 3764
www.godavaricarrentals.com/wp-content/themes/posterity/css/icomoon.css?ver=1.0
200 OK 473 B URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/css/icomoon.css?ver=1.0
IP
Hash 4031f9603b9643bb66665317eb96ac1d
959020b02074aeaa5bdea09045f39bc5291fd56d
31948dd18986b454f0cb910598b78c913c74e45e410af7eda31ba0ec824e08a8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/css/icomoon.css?ver=1.0 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "51c-5dc73b6c90ba3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds003.sk1.h2,1675304431.cds257.sk1.sc,1675304432.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304432.cds257.sk1.p
Connection: keep-alive
Content-Length: 473
www.godavaricarrentals.com/wp-content/themes/posterity-dark/style.css?ver=1.3
200 OK 1.7 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity-dark/style.css?ver=1.3
IP
File type ASCII text, with very long lines (612), with CRLF line terminators
Hash 09e1dde011a9dab5d71a691f1a1619e2
be426fc784f33000a98457f36de86ff3f33b93c8
e93d3ddf3bbaa32d29c553edc2172295965f77fc7f3f3ff650b0566e7eddff03
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity-dark/style.css?ver=1.3 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:53:48 GMT
Upgrade: h2,h2c
ETag: "218b-5dc73b6b78734-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds249.sk1.h2,1675304432.cds209.sk1.sc,1675304432.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1675304432.cds209.sk1.p
Connection: keep-alive
Content-Length: 1711
www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.2
200 OK 13 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.2
IP
File type ASCII text, with very long lines (59158)
Hash d7913fc87c4606f82b4ee77a8d47fc2f
62a54acf7535ae53425b44dadfe5fdabf3d8300a
bb05c88bb0b82e2f14f1efb94b4c3511292f74c3bb7cb0b104d300a42a49492f
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Mon, 11 Apr 2022 06:58:10 GMT
Upgrade: h2,h2c
ETag: "e7d0-5dc5b77a03bdd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds214.sk1.h2,1675304432.cds227.sk1.sc,1675304432.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1675304432.cds227.sk1.p
Connection: keep-alive
Content-Length: 12869
www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.2
200 OK 4.2 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.2
IP
File type ASCII text, with very long lines (26516)
Hash d74abcef3df71d56667a44693f75c454
be993a7b5c88a550ef0dc19c4841f240e41967f8
8c8fb98c0a68a93f2bcf224fcc1bdaa1095fc1b3f5418f2e2c5fddcfa3dee410
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Mon, 11 Apr 2022 06:58:10 GMT
Upgrade: h2,h2c
ETag: "684e-5dc5b77a09d85-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds003.sk1.h2,1675304432.cds227.sk1.sc,1675304432.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1675304432.cds227.sk1.p
Connection: keep-alive
Content-Length: 4229
www.godavaricarrentals.com/wp-content/themes/posterity/style.css?ver=1.0
200 OK 35 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/style.css?ver=1.0
IP
File type ASCII text, with very long lines (1887), with CRLF line terminators
Hash 477cb3ce2022c76b291bab245f76317c
ee6a80756bbbc7c92052c5ba205e8636b5cd0f1d
1b15ab55b3eb9755ee65eaa921bc05d7f823f84b8c5390b6b0ca1fcd5c414cd5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/style.css?ver=1.0 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "2f610-5dc73b6cb97fd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds248.sk1.h2,1675304432.cds012.sk1.sc,1675304432.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1675304432.cds012.sk1.p
Connection: keep-alive
Content-Length: 35061
www.godavaricarrentals.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.5 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 27cbbd0a9d7c5ad9402118c4afc36035
7659d08a005f5ecfa6c779e3cda45c30007fd059
ebc771d0af626966e38535357861fab0090e0bd7ff346cbe3c7ffdde1683809f
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 24 May 2022 21:06:57 GMT
Upgrade: h2,h2c
ETag: "194b-5dfc856486204-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds003.sk1.h2,1675304432.cds204.sk1.sc,1675304432.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1675304432.cds204.sk1.p
Connection: keep-alive
Content-Length: 2457
www.godavaricarrentals.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Wed, 18 Nov 2020 19:36:06 GMT
Upgrade: h2,h2c
ETag: "2bd8-5b466b8f0b580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds214.sk1.h2,1675304432.cds010.sk1.sc,1675304432.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304432.cds010.sk1.p
Connection: keep-alive
Content-Length: 4169
www.godavaricarrentals.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.5 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 287748e15cc4a588d0df39da369d9035
b02e10a775f9d6ab54d448acffbc9253e2d9bfb9
742f6e950eecbeaf0c308f5d3877e48d6d57d48b7f8bd458d81875feb4b58654
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Wed, 02 Nov 2022 09:12:40 GMT
Upgrade: h2,h2c
ETag: "459f-5ec793e1d37fa-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds248.sk1.h2,1675304432.cds250.sk1.sc,1675304432.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304432.cds250.sk1.p
Connection: keep-alive
Content-Length: 6532
www.godavaricarrentals.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 31 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 1b5264c989379b828aff60f65a518a24
98641237f14ccb33ac114f54329a33bd0aa17eb7
6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Wed, 02 Nov 2022 09:12:41 GMT
Upgrade: h2,h2c
ETag: "15e54-5ec793e2a3fee-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds249.sk1.h2,1675304432.cds213.sk1.sc,1675304432.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304432.cds213.sk1.p
Connection: keep-alive
Content-Length: 30995
www.godavaricarrentals.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
200 OK 331 B URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
IP
File type ASCII text, with very long lines (463)
Hash ba2b50662c393ff6ba69961f66b24d5d
d5694f33b1072b13fc4c3989e90252c0b28030a2
79ad638f020827a6db341526b430e65459aa712bfbdcabf28bb013c6b2c715e9
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 24 May 2022 21:06:59 GMT
Upgrade: h2,h2c
ETag: "1f2-5dfc8566832a7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds003.sk1.h2,1675304432.cds260.sk1.sc,1675304432.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1675304432.cds260.sk1.p
Connection: keep-alive
Content-Length: 331
www.godavaricarrentals.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/js/base.js?ver=2.4.9
200 OK 287 B URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/auto-terms-of-service-and-privacy-policy/js/base.js?ver=2.4.9
IP
Hash 5b00accb8d43b188432596e599a5aede
a30edc8ac38e7dac57f189ec5fed4439ea1247bb
d3bdcd8b12b6c3dcab2d287799acc621ed37272a96d73e9e5edc2b833e705a34
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/auto-terms-of-service-and-privacy-policy/js/base.js?ver=2.4.9 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:14:35 GMT
Upgrade: h2,h2c
ETag: "2d0-5dc732a76add1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds214.sk1.h2,1675304432.cds214.sk1.sc,1675304432.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304432.cds214.sk1.p
Connection: keep-alive
Content-Length: 287
www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.2
200 OK 4.2 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.2
IP
File type ASCII text, with very long lines (14869)
Hash 1fcdd9935a66511c3b8069495af248e3
b0e375ac95b547b3bb6ce74cd1bcc505ffc2281d
4a741209fc122872cb5ae018a5870d70848a616fa98eb4289ad78cec986ec282
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:32 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Mon, 11 Apr 2022 06:58:10 GMT
Upgrade: h2,h2c
ETag: "3acf-5dc5b77a262a7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds248.sk1.h2,1675304432.cds242.sk1.sc,1675304432.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1675304432.cds242.sk1.p
Connection: keep-alive
Content-Length: 4205
www.godavaricarrentals.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6
200 OK 3.3 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6
IP
File type HTML document, ASCII text, with very long lines (9720), with no line terminators
Hash 4ac0d5ab8d83806d59c4e1f7bf0a855a
81153a2f5e3a21febe9ede53c9f0073da3e14829
605fd4e7f4d3fbb5505bb81e3f72c685b6ef411c27cde2f7bab2787c3d870b10
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:14:17 GMT
Upgrade: h2,h2c
ETag: "25f8-5dc73296c787a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds249.sk1.h2,1675304432.cds238.sk1.sc,1675304433.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304433.cds238.sk1.p
Connection: keep-alive
Content-Length: 3286
www.godavaricarrentals.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.4.0.5
200 OK 6.8 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.4.0.5
IP
File type ASCII text, with very long lines (12613), with CRLF line terminators
Hash 81d37805b0b2342a522f5fdc1c126d3e
1b0b1395367b1ca1f00907994d119c0f2e9b9422
bfc9b8a196db96c03a1926ff96b0147391bc8118a4ccaa6bdf1adff4a30b710b
GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.4.0.5 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:14:57 GMT
Upgrade: h2,h2c
ETag: "5cbf-5dc732bd047a6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds003.sk1.h2,1675304432.cds258.sk1.sc,1675304433.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304433.cds258.sk1.p
Connection: keep-alive
Content-Length: 6829
www.godavaricarrentals.com/wp-content/themes/posterity/js/helpers.min.js?ver=1.0
200 OK 1.6 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/helpers.min.js?ver=1.0
IP
File type ASCII text, with very long lines (2619)
Hash eda1b54bda2ad23c456dc8e8dde5f05f
af8bf9e702e19bfe4e90242be8ce1ae0912c48b6
069d7378b392593d669ffee2540483736dd4a8a4ec34313a98e340ff766ed6ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/helpers.min.js?ver=1.0 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "e22-5dc73b6cad4ad-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds214.sk1.h2,1675304432.cds260.sk1.sc,1675304433.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1675304433.cds260.sk1.p
Connection: keep-alive
Content-Length: 1574
www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.fitvids.min.js?ver=1.1
200 OK 958 B URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.fitvids.min.js?ver=1.1
IP
File type HTML document, ASCII text, with very long lines (1716)
Hash d63185eeec9f136c2438c70245aa5ff4
a90f066a1d56c2b85fc515767554f2bdcc0c0fae
6b31bc198acfd6ec81fc3d8c5298b9533d77b6831d449032554d9679688d6841
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/jquery.fitvids.min.js?ver=1.1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "7d7-5dc73b6caf3ed-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304432.cds248.sk1.h2,1675304432.cds211.sk1.sc,1675304433.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304433.cds211.sk1.p
Connection: keep-alive
Content-Length: 958
www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.slides.min.js?ver=3.0.4
200 OK 3.0 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.slides.min.js?ver=3.0.4
IP
File type ASCII text, with very long lines (11460)
Hash 82b0670dfc3d002d04a6c17f805b0a57
f2a11a9a61989a0cbbac8de93e1336ae10ae7f2d
aae34d773fd8c90bcdd159fd6c68c6ae82014ee9d44bb638669426bc868ab838
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/jquery.slides.min.js?ver=3.0.4 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "2d7d-5dc73b6cb038d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds003.sk1.h2,1675304433.cds003.sk1.sc,1675304433.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1675304433.cds003.sk1.p
Connection: keep-alive
Content-Length: 2956
www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.sticky-kit.min.js?ver=1.1.2
200 OK 1.4 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.sticky-kit.min.js?ver=1.1.2
IP
File type ASCII text, with very long lines (546)
Hash 5e4b292edc9592e49efdfd287423b2d6
41532059d1029d9d47780e1a44c4cadf6d1cfc08
d9d4646d51ba646692ff44ed932b41cf62cdd9ac7bea061299d7569d5d292f74
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/jquery.sticky-kit.min.js?ver=1.1.2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "cc4-5dc73b6cb0f45-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds214.sk1.h2,1675304433.cds259.sk1.sc,1675304433.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304433.cds259.sk1.p
Connection: keep-alive
Content-Length: 1411
www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.fittext.min.js?ver=1.2
200 OK 390 B URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.fittext.min.js?ver=1.2
IP
File type ASCII text, with very long lines (380)
Hash 33ee91567d6a5252a129e76fb3a53086
dd182c9a5b7a88bab95969938419b9ec830ca10c
521ec23e5c818d9c5900bdceffdb599a9dbda1d6d57f323eb8dfc52983d657a0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/jquery.fittext.min.js?ver=1.2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "234-5dc73b6caec1d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds249.sk1.h2,1675304433.cds015.sk1.sc,1675304433.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304433.cds015.sk1.p
Connection: keep-alive
Content-Length: 390
www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.mousewheel.min.js?ver=3.1.13
200 OK 1.2 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/jquery.mousewheel.min.js?ver=3.1.13
IP
File type ASCII text, with very long lines (2609)
Hash 54305bf29ff554732346e099f69266d3
e31ea109f9d72d17a48a3016facf16a3a0cd2eae
3037271a8308d863016cd2f36a664a49874a2730acc36679c36e6c12a0f7dab3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "ad3-5dc73b6caffa5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds248.sk1.h2,1675304433.cds245.sk1.sc,1675304433.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1675304433.cds245.sk1.p
Connection: keep-alive
Content-Length: 1241
www.godavaricarrentals.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash 8fa87dd23394a22621248ec378d2af59
9305bc637a89b1700d7f56a19a80bd32b0feb2f7
c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Tue, 15 Nov 2022 21:07:11 GMT
Upgrade: h2,h2c
ETag: "172a9-5ed88bd527573-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds241.sk1.h2,1675304431.cds002.sk1.sc,1675304433.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1675304433.cds002.sk1.p
Connection: keep-alive
Content-Length: 12518
www.godavaricarrentals.com/wp-content/themes/posterity/js/typed.min.js?ver=1.1.4
200 OK 1.6 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/typed.min.js?ver=1.1.4
IP
File type ASCII text, with very long lines (3949)
Hash 5605b0559bea37bee9ce426b0a52c2cb
8d37d2da41ed291881dc8891764145ccb51ab610
4b3622d4856464be9507f7ef44f3fc1c8ff22347c1d729abf072af1f0cf0b6b2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/typed.min.js?ver=1.1.4 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "1032-5dc73b6cb22cd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds003.sk1.h2,1675304433.cds236.sk1.sc,1675304433.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1675304433.cds236.sk1.p
Connection: keep-alive
Content-Length: 1600
www.godavaricarrentals.com/wp-content/themes/posterity/js/light-gallery/js/lightgallery-all.min.js?ver=1.6.9
200 OK 12 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/light-gallery/js/lightgallery-all.min.js?ver=1.6.9
IP
File type ASCII text, with very long lines (31977)
Hash d4e41b0976f6c56a92d3a8ffa6aa942b
b10409f4108fc7bf8f799fb84346e0211a4bcc7b
39892cdb13538f223c5047b7b29c485df7eef24260dcebb7b0e0c7efa3668cc0
GET /wp-content/themes/posterity/js/light-gallery/js/lightgallery-all.min.js?ver=1.6.9 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "c18b-5dc73b6cac50d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds249.sk1.h2,1675304433.cds259.sk1.sc,1675304433.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304433.cds259.sk1.p
Connection: keep-alive
Content-Length: 11994
www.godavaricarrentals.com/wp-content/plugins/skt-templates/css/templaters.css?ver=6.1.1
200 OK 29 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/skt-templates/css/templaters.css?ver=6.1.1
IP
File type ASCII text, with very long lines (542), with CRLF line terminators
Hash 636572aa7cb9e17ca31963ce478a4800
c05472bc91b6c123b86e17754214a24d730495b9
075e213f3b8b747e91b1f2794e9296562b1f3f0cf1e8e5002a03d04851b720d5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/skt-templates/css/templaters.css?ver=6.1.1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Mon, 11 Apr 2022 06:58:24 GMT
Upgrade: h2,h2c
ETag: "2fa42-5dc5b78732c93-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304431.cds017.sk1.h2,1675304431.cds249.sk1.sc,1675304433.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1675304433.cds249.sk1.p
Connection: keep-alive
Content-Length: 28808
www.godavaricarrentals.com/sbbi/?sbbpg=utMedia&vii=ehe4ed796439c9640fc293488b484ebd09f9e785d33c57377e8e554339c88bc2t3h3l6l1
200 OK 43 B URL HTTP/1.1 www.godavaricarrentals.com/sbbi/?sbbpg=utMedia&vii=ehe4ed796439c9640fc293488b484ebd09f9e785d33c57377e8e554339c88bc2t3h3l6l1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /sbbi/?sbbpg=utMedia&vii=ehe4ed796439c9640fc293488b484ebd09f9e785d33c57377e8e554339c88bc2t3h3l6l1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Cache-Control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
Transfer-Encoding: chunked
Content-Type: image/gif
Server: fbs
X-Accel-Expires: 0
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds249.sk1.h2,1675304433.cds010.sk1.sc,1675304433.cdn2-redis01-arn1.stackpath.systems.-.i,1675304433.cds010.sk1.p
Connection: keep-alive
www.godavaricarrentals.com/wp-content/themes/posterity/js/isotope.pkgd.min.js?ver=3.0.6
200 OK 15 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/isotope.pkgd.min.js?ver=3.0.6
IP
File type ASCII text, with very long lines (31989)
Hash e3cac7a1747afb553ba1088339a6f888
9fb1848da86c0c4e252271ba0493cebabd8e9ef2
30ed1de3b16e10df5ff38a29c768207ef3939145e42500b48363381c9a8c8a35
GET /wp-content/themes/posterity/js/isotope.pkgd.min.js?ver=3.0.6 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "d56f-5dc73b6cadc7d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds214.sk1.h2,1675304433.cds258.sk1.sc,1675304433.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304433.cds258.sk1.p
Connection: keep-alive
Content-Length: 14889
www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29
200 OK 11 kB URL HTTP/1.1 www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (20205)
Hash c9ef6d320281a6b74f92404036cc7fa0
5d8913a0c611bda2118792d1b2fd524460587b81
914e7a2fa2d53b096de78686b916272c5872de1d5b63b888c5154ae8a2635f98
GET /sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Cache-Control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Server: fbs
X-Accel-Expires: 0
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds249.sk1.h2,1675304433.cds249.sk1.sc,1675304433.cdn2-wafbe01-arn1.stackpath.systems.-.i,1675304433.cds249.sk1.p
Connection: keep-alive
www.godavaricarrentals.com/wp-content/themes/posterity/js/script.min.js?ver=1.0
200 OK 25 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/script.min.js?ver=1.0
IP
File type ASCII text, with CRLF line terminators
Hash 26f9db812d69f18b4d0cc122d261451f
e8faf59d9848ba3743dda11439745f27915a9160
cdb61e8e5cbd41f349cf2267fc7da7c3229622fde7a82402760ec1bbc8a3b296
GET /wp-content/themes/posterity/js/script.min.js?ver=1.0 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "259c6-5dc73b6cb1ee5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds248.sk1.h2,1675304433.cds202.sk1.sc,1675304433.cdn2-redis02-arn1.stackpath.systems.-.wx,1675304433.cds202.sk1.p
Connection: keep-alive
Content-Length: 24599
www.godavaricarrentals.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.0 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 24 May 2022 21:07:00 GMT
Upgrade: h2,h2c
ETag: "48b9-5dfc85670700f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds241.sk1.h2,1675304433.cds209.sk1.sc,1675304433.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1675304433.cds209.sk1.p
Connection: keep-alive
Content-Length: 5009
www.godavaricarrentals.com/wp-content/uploads/2022/04/GCR-logo.png
200 OK 6.7 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/uploads/2022/04/GCR-logo.png
IP
File type PNG image data, 200 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash b234650fc9d569f516aafcc4cfe5ca8b
e50f72e9e2e611c2e3ab90a336159f63ba09a7a7
4105e0b912fa88ba737bb99f4d0c39345a10541332febd341ba9106513036db5
GET /wp-content/uploads/2022/04/GCR-logo.png HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Type: image/png
Last-Modified: Tue, 12 Apr 2022 12:06:30 GMT
Upgrade: h2,h2c
ETag: "1a33-5dc73e422a2aa"
Accept-Ranges: bytes
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds003.sk1.h2,1675304433.cds003.sk1.sc,1675304433.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1675304433.cds003.sk1.p
Connection: keep-alive
Content-Length: 6707
www.godavaricarrentals.com/wp-content/themes/posterity/js/webfontloader.min.js
200 OK 5.0 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/themes/posterity/js/webfontloader.min.js
IP
File type ASCII text, with very long lines (2171)
Hash 00ad124bdafa1150d574d774f85138e3
bcc928356ad81befa7aa915af9f3d7794d570ccf
054c1484198aa39214d457fee92fc081ee0eab81023393a105c1b88cebeacb6a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/posterity/js/webfontloader.min.js HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=D-h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Tue, 12 Apr 2022 11:53:49 GMT
Upgrade: h2,h2c
ETag: "30d8-5dc73b6cb2e85-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds017.sk1.h2,1675304433.cds255.sk1.sc,1675304433.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304433.cds255.sk1.p
Connection: keep-alive
Content-Length: 5012
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 02:20:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Poppins%7CPoppins%7CPoppins%7CPoppins
200 OK 863 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins%7CPoppins%7CPoppins%7CPoppins
IP
Hash 2890c0796af70fdc1611b491f9e9c108
89db6c1cd15110ad3b53bbe6475ed552f7e79e66
b9723f8f71f7cf7bd3acfe6c17d25d91d405be5077934a23169abbfe70d377d2
GET /css?family=Poppins%7CPoppins%7CPoppins%7CPoppins HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 02:20:33 GMT
date: Thu, 02 Feb 2023 02:20:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.godavaricarrentals.com/wp-content/uploads/2022/04/cropped-GCR-logo-32x32.png
200 OK 1.4 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/uploads/2022/04/cropped-GCR-logo-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e972f6436f51f3914649e4cba29e6a7
41bc3547a0979084b18834116e96417743e850df
22abc4c73a27473dd794e7f969cca70d2e29b1fab6f527b5e0960b70770ec142
GET /wp-content/uploads/2022/04/cropped-GCR-logo-32x32.png HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb; adOtr=67e3e6e0c9c
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:34 GMT
Content-Type: image/png
Last-Modified: Tue, 12 Apr 2022 12:06:54 GMT
Upgrade: h2,h2c
ETag: "58e-5dc73e58d43ed"
Accept-Ranges: bytes
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds017.sk1.h2,1675304433.cds247.sk1.sc,1675304434.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304434.cds247.sk1.p
Connection: keep-alive
Content-Length: 1422
www.godavaricarrentals.com/wp-content/uploads/2022/04/cropped-GCR-logo-192x192.png
200 OK 12 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/uploads/2022/04/cropped-GCR-logo-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash f5f1e8b08493d07c25726082a1da4a57
6bd62393fb0c6a99b3a195e434a3d6fb171d0983
636bb1a7372235b5a96c81ba6bdb69a74faea6e97557156adbde2b9c5609c346
GET /wp-content/uploads/2022/04/cropped-GCR-logo-192x192.png HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/2018/04
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb; adOtr=67e3e6e0c9c
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:34 GMT
Content-Type: image/png
Last-Modified: Tue, 12 Apr 2022 12:06:54 GMT
Upgrade: h2,h2c
ETag: "305e-5dc73e58bfbcc"
Accept-Ranges: bytes
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds248.sk1.h2,1675304433.cds020.sk1.sc,1675304434.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1675304434.cds020.sk1.p
Connection: keep-alive
Content-Length: 12382
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 02:20:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.godavaricarrentals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 04:05:29 GMT
expires: Tue, 30 Jan 2024 04:05:29 GMT
cache-control: public, max-age=31536000
age: 252905
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 02:20:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29
200 OK 345 B URL HTTP/1.1 www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (532), with no line terminators
Hash ed18e0f9b1f6f71153b7d0058a636d51
24945eccbcee0371420686b29bfb5e75c2b9d8da
591f57e7857261880668cb20d834b386d47436e2246c5c457cac607f48be6526
POST /sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 500
Origin: http://www.godavaricarrentals.com
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb; adOtr=67e3e6e0c9c
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:34 GMT
Cache-Control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Server: fbs
X-Accel-Expires: 0
Access-Control-Allow-Origin: *
X-HW: 1675304434.cds248.sk1.h2,1675304434.cds226.sk1.sc,1675304434.cdn2-wafbe02-arn1.stackpath.systems.-.i,1675304434.cds226.sk1.p
Connection: keep-alive
www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb
200 OK 2.7 kB URL HTTP/1.1 www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4902)
Hash 59f0e698b57af1a6cf1a4526c86466a5
c8b0187431f88e6228614ef6e0b845a20c221c08
6830e8920af56b468df0aaa7bc49cab5f64ccf5e5b31d2cb5f469ac167bdc9c5
GET /sbbi/?sbbpg=sbbShell&gprid=Nb HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/sbbi/?sbbpg=sbbShell&gprid=Nb&sbbgs=h4d94994f238b8ed99753c77ee5398b23361&ddl=29
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb; adOtr=67e3e6e0c9c
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:34 GMT
Cache-Control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Server: fbs
X-Accel-Expires: 0
Access-Control-Allow-Origin: *
X-HW: 1675304434.cds248.sk1.h2,1675304434.cds239.sk1.sc,1675304434.cdn2-redis02-arn1.stackpath.systems.-.i,1675304434.cds239.sk1.p
Connection: keep-alive
www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/1.1 www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.godavaricarrentals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.godavaricarrentals.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.2
Cookie: SPSI=eee763c60c94844b0fe8d35378543c8c; SPSE=ptlhwMtjfFHRbdJkatIzJajL5GPaE5LWqKnrrTR6laam3pG0J8Ko/1iOJfGbMwOFWq4D3po4k6AvgT3hytcWEw==; spcsrf=e95f096452ff3dae9174c576c87e4d68; UTGv2=h4d94994f238b8ed99753c77ee5398b23361; sp_lit=L4HOS1gAv7p7pOBJPiDAPg==; PRLST=Nb
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 02:20:34 GMT
Content-Type: application/octet-stream
Last-Modified: Mon, 11 Apr 2022 06:58:11 GMT
Set-Cookie: spcsrf=3403fe5035d0bf251d10c3820a983d55; path=/; SameSite=Strict; HttpOnly; expires=Thu, 02-Feb-23 04:20:33 GMT
UTGv2=D-h4ce712eeb4ccfa9f96f7778989deb560362; path=/; SameSite=Lax; expires=Tue, 01-Aug-23 02:20:33 GMT
Upgrade: h2,h2c
ETag: "13174-5dc5b77a85dec"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Server: fbs
Access-Control-Allow-Origin: *
X-HW: 1675304433.cds214.sk1.h2,1675304433.cds067.sk1.sc,1675304434.cdn2-redis01-arn1.stackpath.systems.-.wx,1675304434.cds067.sk1.p
Connection: keep-alive
Content-Length: 78196
151.139.128.10
95.101.11.115