dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
301 Moved Permanently 300 B URL HTTP/1.1 dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 371cec0a02e7dd161120b5f6c54194f5
d6d6609b7fa26f47ef38997c77605ff537b7c40d
91181aebabd2409f5be8eb45008e6d2f0a6899e6e057d86895ab2ec3bd0bd53a
Analyzer Verdict Alert fortinet Phishing
GET /uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Sep 2022 16:34:17 GMT
Server: Apache
Location: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Content-Length: 300
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 490c003436e215e91596f285fcba92f5
0c4c9a5802e7cdb699f4918c252dbdf8431c25ec
9fe6beb1cb3851018168765a243b6de69ec71d30770f8c2dcc57cae7d9978cc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FE6BEB1CB3851018168765A243B6DE69EC71D30770F8C2DCC57CAE7D9978CC1"
Last-Modified: Wed, 28 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13401
Expires: Wed, 28 Sep 2022 20:17:38 GMT
Date: Wed, 28 Sep 2022 16:34:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 15:54:51 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kl-zJUcFDkVkQ3_BYz48acbtVSSKCkJCvMSweVnrEr9MsBufy5k_Lw==
Age: 2366
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: __X3W1KcwmfT8s9Xxnw92F-hoKhHBMDGtb6eBeQ5JUMSUWDfK3u8Mg==
age: 39951
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 16:34:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 16:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 17:25:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aEuTKIEwoh22HpeimpxL6-4LOfELMY78Zz9Ks5IaRPqScybFR1d7_g==
Age: 284
ocsp.digicert.com/
200 OK 471 B IP
Hash 3526d5ce1381ba26cbc553db057e1915
fe01c920696448e8bf12e6fff877bce8281d34a2
09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2744
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:18 GMT
Last-Modified: Wed, 28 Sep 2022 15:48:34 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
404 Not Found 30 kB URL HTTP/1.1 dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1782), with CRLF, LF line terminators
Hash aab5df9f41898cb6507f57cd8a2ad277
f657435b2bcc1df93ead75574719f3c6dec2681e
aebc44701ab7123b59f278952b0aeaef17a0288e4bb26eedf04e8c8739d98153
Analyzer Verdict Alert fortinet Phishing
GET /uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 16:34:17 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dbluemarketing.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e2875a9e06f892f0d4fa46c0f98a1c49
9c0e332f55a592367b602494642ee2127699b543
74692ca89ddc427d0c55f56aedb738b107a9761c44ed5201f932f54950a6f406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/wp-includes/css/dist/block-library/style.min.css?ver=5.0.17
200 OK 26 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/css/dist/block-library/style.min.css?ver=5.0.17
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash eb1a96949e0ea0d08033d3f941bf1f3e
8e8e16cd9105066fe8dc4f80ace8010d060f08f4
1698abe528bb1f8e76991814a09aacb0ec7247d421ed2e4ff8f00e3fb1275712
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:39 GMT
Accept-Ranges: bytes
Content-Length: 25658
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: o0CJ9dSJY7rdDK3Lh3lumA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oh8GpIvSkPqHjtcCHkTuOIEakFo=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e2875a9e06f892f0d4fa46c0f98a1c49
9c0e332f55a592367b602494642ee2127699b543
74692ca89ddc427d0c55f56aedb738b107a9761c44ed5201f932f54950a6f406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WHW8R5K
200 OK 56 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WHW8R5K
IP
File type ASCII text, with very long lines (2039)
Hash 07cc64146961028922e47c6564c82e08
c04724b7a54102bae61b628f1343a40ce6321652
536e45c8a96fa448023d9d744d0544998a13916590f3f82b7518e5ee8658c49c
GET /gtm.js?id=GTM-WHW8R5K HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 28 Sep 2022 16:34:18 GMT
expires: Wed, 28 Sep 2022 16:34:18 GMT
cache-control: private, max-age=900
last-modified: Wed, 28 Sep 2022 16:03:12 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55863
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15
200 OK 4.5 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15
IP
Hash 56b98e1ea752f518c2d4dc18b47c79e0
d7b8d81523ddb5232b3051e850e71f3ba0e521e8
6baa10abfc0f43f7b087e4e07dd46fc63911a19744799a5c79acba4c13175fd9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:28 GMT
Accept-Ranges: bytes
Content-Length: 4514
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15
200 OK 8.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15
IP
File type ASCII text, with very long lines (776)
Hash 2837f27759ecfaf6107fc9bff9ad4623
5a875fc10f5c7e91772ba5a52d627da1572d294c
e41aa4bbd652e8426528cd8f98c531fa4bafd3ad65cbeaeea7c931ca8aa105fe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:29 GMT
Accept-Ranges: bytes
Content-Length: 8362
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 17:54:12 GMT
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15
200 OK 13 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15
IP
Hash 134d36ccd55a3865fccee8ffa9840c2f
cc10fbd8363394dae26d6a954f27d2b7cf8e5a14
bbf8b025f38fc6aef74423424106cc06be1b91e2c794cff8d9bf1e5b9a3ddfbb
GET /wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:29 GMT
Accept-Ranges: bytes
Content-Length: 13224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
200 OK 28 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
IP
Hash 9609f7e7d295c7228a85b050d947c822
02ebd37aaf99e4bd3b01c7a76c3300ef94c34cb4
88919c061becf91230051c714af2770d3d496c0ad35ac6081e7bd778ac3d22f6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 19:06:52 GMT
Accept-Ranges: bytes
Content-Length: 27506
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15
200 OK 6.2 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15
IP
Hash b7f7a59349cf1d6d37822acd901b897f
e5bc14bc804e25f35311bbaa04b339ff85fc5634
7a837b776636532b1285a0538cc6819203d005abe0ebc552dd349ebeec51dfe3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:45 GMT
Accept-Ranges: bytes
Content-Length: 6183
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 97 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash dc5ba5044fccc0297be7b262ce669a7c
f137ff98ae379e35b0702967d3b6866a0a40e3be
cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 17:54:14 GMT
Accept-Ranges: bytes
Content-Length: 96874
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15
200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15
IP
File type ASCII text, with very long lines (10126)
Hash b34754baa665255accae552a1da39ef0
c1b6e804a7ca05f09a3f80ec7c5d926966063dbe
9c12c1ab49081580907c9927752e7b7bb510a148710be87c03b6fb7d79632c32
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 10215
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15
200 OK 6.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15
IP
File type ASCII text, with very long lines (6322)
Hash 63d1efa154bd0728b1dcb3c4abee929d
b29b779e8b5fc5809e25343858a7d73ee4c93a02
d50e992ac846d1a23ac3fde9ddc997a572fc65702611c667b0a758cf8ee99083
GET /wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 6418
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15
200 OK 25 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15
IP
File type ASCII text, with very long lines (24110)
Hash c0efc8c25969b270348069a176e93f8c
39680ef85bdbec350f35e41de4bfca303f5dc34f
db06dcfa0112b05cef7abd20fadc5baf632a316515f07cfd4fceb436c8a0cb1b
GET /wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 25168
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
200 OK 7.6 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
IP
Hash a20ccc97b8ab6324adeb56fa34a04c55
bd9ceb6f34eac052e13bb21f76ce83f7334841d2
19e3bcd44b9c726bc12f4138ee4dece9f85487a7b54ea467f6444e323de2207f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 7583
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15
200 OK 7.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15
IP
Hash ac64ec723cd0e47a8885ec1de47b69ed
20153b749d38915c7546bdc743d0e669bac051ab
3aa74777e9e4c823d67f704e4e35d820ad70b8363c403580d8e8bf7a9d2449c8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:46 GMT
Accept-Ranges: bytes
Content-Length: 7381
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/wp-emoji-release.min.js?ver=5.0.17
200 OK 12 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/wp-emoji-release.min.js?ver=5.0.17
IP
File type ASCII text, with very long lines (9063)
Hash fe0575b66568074463f12485d90f6d4c
aeedd9ab3b7874e63f647042963cb1301a38b391
647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 06:07:30 GMT
Accept-Ranges: bytes
Content-Length: 11943
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
200 OK 122 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
IP
File type ASCII text, with very long lines (65371)
Size 122 kB (122540 bytes)
Hash 5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87
GET /wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:00 GMT
Accept-Ranges: bytes
Content-Length: 122540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/themes/BlueMDeep/js/temp.js?ver=1.0
200 OK 879 B URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/js/temp.js?ver=1.0
IP
Hash c4f5e8e61f2949f5f57c5c9895baee4c
061ef5019c9d9c61c1e0947ef22ae788f813bc1b
2016efd04ddb0018166d9c648e6e86e63c04c78eb37dcd3b23543111a8ec05ad
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/js/temp.js?ver=1.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:09 GMT
Accept-Ranges: bytes
Content-Length: 879
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/wp-embed.min.js?ver=5.0.17
200 OK 1.4 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/wp-embed.min.js?ver=5.0.17
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash 570ae0f3c201604926ea599d3d1f6c04
2c29243a73660964d4712b969d2a15e27777bc14
5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-embed.min.js?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 06:07:30 GMT
Accept-Ranges: bytes
Content-Length: 1391
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0
200 OK 37 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0
IP
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:08 GMT
Accept-Ranges: bytes
Content-Length: 36816
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/uploads/2016/01/page-logo.png
200 OK 32 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/page-logo.png
IP
File type PNG image data, 279 x 269, 8-bit/color RGBA, non-interlaced\012- data
Hash 1162ec5908b9b4c7872cdb8d5b5dd0b1
09bc27fcf17e28e975f9acb088312224aa363a3a
9ac1d40a9cdb230082d0bce887a0e6b6acc1aa1a5eb9b166b950ceab12e4fdfc
GET /wp-content/uploads/2016/01/page-logo.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:17 GMT
Accept-Ranges: bytes
Content-Length: 31948
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/coffeelogo-300x89.png
200 OK 21 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/coffeelogo-300x89.png
IP
File type PNG image data, 300 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 32727ac4121f5218248de08637c22ad5
e2ba87ad031c37cd916e7986ba7e25d465bce02c
a16ddd8755a2f4e90e61cb09e9fc9280286062a575dba77be4947adc4f461757
GET /wp-content/uploads/2016/01/coffeelogo-300x89.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:15 GMT
Accept-Ranges: bytes
Content-Length: 20786
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/merlot-logo-300x88.png
200 OK 19 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/merlot-logo-300x88.png
IP
File type PNG image data, 300 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d1000e7afbf62d3c7e6451d5340c9dd
46e64ecff1af44bdceab43884f67f02be09c167d
38b1b484af18b163395937f98eaee36ae2bf9e3f2d649af50b086b6c6362d0fb
GET /wp-content/uploads/2016/01/merlot-logo-300x88.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:16 GMT
Accept-Ranges: bytes
Content-Length: 19321
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/goulashlogo-300x87.png
200 OK 20 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/goulashlogo-300x87.png
IP
File type PNG image data, 300 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash 303492d2fe5ea3e53fbe626a75868015
cb61a0be7be3cbccf2561caf42faa1dfc05d2c6c
dbbd0ceb34e5215d6d23b80c064c137c2b549b113dab630c8d39b754f44fd223
GET /wp-content/uploads/2016/01/goulashlogo-300x87.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:16 GMT
Accept-Ranges: bytes
Content-Length: 20081
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:03 GMT
Accept-Ranges: bytes
Content-Length: 18028
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff2
dbluemarketing.com/wp-content/uploads/2016/02/1454432292_home.png
200 OK 466 B URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/02/1454432292_home.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash a1b6e9a138ea8e05a5ee3077a1d4789a
389b1079932a10e391b64c3181110f0f2dea3b97
c41894ea5ed0bad49046913b8bde2bc6e33a7c5cdd8ea4ce401ffc6db06c23ef
GET /wp-content/uploads/2016/02/1454432292_home.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:19 GMT
Accept-Ranges: bytes
Content-Length: 466
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png
200 OK 22 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png
IP
File type PNG image data, 270 x 146, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e0ae9ff11312f00c698acaac545f29e
7f510e68d46761e0d8908a184bbada7da236e820
83f5fe833b039f8964223468ed8b85c128e3e55a218ce84af094e587da4086f4
GET /wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:04 GMT
Accept-Ranges: bytes
Content-Length: 22165
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/02/58v_ewEI.jpg
200 OK 18 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/02/58v_ewEI.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3\012- data
Hash f4293771945e46eb6f36247afd539995
d159cfc0cfcb15d512438d5431011a79f7f4962c
8ff13d28832dd3e0722ec3f9a41fe1cf7551c6b2fc3459c8f762e3d68534f0c7
GET /wp-content/uploads/2018/02/58v_ewEI.jpg HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:03 GMT
Accept-Ranges: bytes
Content-Length: 18136
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf
200 OK 645 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf
IP
File type TrueType Font data, 16 tables, 1st "GPOS", 34 names, Macintosh, Copyright (c) 2011-2015 by tyPoland Lukasz Dziedzic (http://www.typoland.com/) with Reserved Fon\012- data
Size 645 kB (644556 bytes)
Hash 90e1d3559ac52f7f0f77a86e1bfd632d
a405c8288a8a90881407f93b6ee02b29e26a8735
e9d59afb6d9cb9cf6e8d8159d4639d5b577e29efc64a15182f228659cfc1e818
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:05 GMT
Accept-Ranges: bytes
Content-Length: 644556
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: font/ttf
dbluemarketing.com/wp-content/uploads/2019/06/FBX-Logo.png
200 OK 72 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/FBX-Logo.png
IP
File type PNG image data, 977 x 567, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d01115245f370cf79fba51a226b225c
14c8ec8c118df3e06eab3ae711ddb7bb9b5d5818
5c896a78ae531b4c07affe4347dcbc8b293de9b4716d87fb574491286b0716e0
GET /wp-content/uploads/2019/06/FBX-Logo.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:18 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:09 GMT
Accept-Ranges: bytes
Content-Length: 72402
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2019/06/MGfav-01.png
200 OK 13 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/MGfav-01.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash b84990b94151434dfc9de9b2b13009f8
1a3f5d808c7e130608e39b8223c5d9ecebb961dd
d7b0957e169881a97db260b96ea21aa580381e056517ed9194077f7c94cfa060
GET /wp-content/uploads/2019/06/MGfav-01.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:19 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:12 GMT
Accept-Ranges: bytes
Content-Length: 12744
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/11/FixThat-logo.jpg
200 OK 14 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/11/FixThat-logo.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 492x492, components 3\012- data
Hash 3d36a8d127f0a8c8fe29ea27445f33d3
75daf935b6e2e56e3a98b2c12977e1819e73a114
6171a6bc1c240147c5e9358be717e77490d349e8070f462c0ab6286ff2ba7b9e
GET /wp-content/uploads/2018/11/FixThat-logo.jpg HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:19 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:06 GMT
Accept-Ranges: bytes
Content-Length: 13563
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.digicert.com/
200 OK 471 B IP
Hash 366fbb58b56c6469840359066ae0ef4b
519ec2d019a3df15e1555ee7e9f784207f3ee604
4c03f3b3b06d0359ff6c3e72e91c39cb8f6e6406ed7b8ba9e09708da8e2d38f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4201
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Last-Modified: Wed, 28 Sep 2022 15:24:18 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17
200 OK 820 B URL HTTP/2 fonts.googleapis.com/css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17
IP
Hash b877d42e150acf554cda0abca0736cfe
ef39742cd2fc471b5e03646952bf7562cb3b362a
c14027af5d57f6ee14b4de577c361e6fc59572868e328c929bfcd20454583635
GET /css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 16:34:18 GMT
date: Wed, 28 Sep 2022 16:34:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 28 Sep 2022 14:41:09 GMT
expires: Wed, 28 Sep 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 6790
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 890f716858b5f72587e47c5eca121cb5
91871a0acd9a0ab644d51036bb5ca0c3bdc5e687
7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 28 Sep 2022 16:34:19 GMT
expires: Wed, 28 Sep 2022 16:34:19 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: oqdP0tC6M6tnK22RwhW6rMxZ1SJio7Ki7qBVd2hDJGw20xxQGYuX0zU0vpDaIjeZfozqW50g/p36hGqT8lBlfw==
content-length: 26840
x-fb-trip-id: 1679558926
date: Wed, 28 Sep 2022 16:34:19 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j97&a=1765129621&t=pageview&_s=1&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=2094031123&gjid=1371912894&cid=1697010050.1664382857&tid=UA-91767122-5&_gid=1189499189.1664382857&_r=1>m=2wg9q0WHW8R5K&z=1071585004
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=1765129621&t=pageview&_s=1&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=2094031123&gjid=1371912894&cid=1697010050.1664382857&tid=UA-91767122-5&_gid=1189499189.1664382857&_r=1>m=2wg9q0WHW8R5K&z=1071585004
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j97&a=1765129621&t=pageview&_s=1&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=2094031123&gjid=1371912894&cid=1697010050.1664382857&tid=UA-91767122-5&_gid=1189499189.1664382857&_r=1>m=2wg9q0WHW8R5K&z=1071585004 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dbluemarketing.com
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://dbluemarketing.com
date: Wed, 28 Sep 2022 16:34:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 366fbb58b56c6469840359066ae0ef4b
519ec2d019a3df15e1555ee7e9f784207f3ee604
4c03f3b3b06d0359ff6c3e72e91c39cb8f6e6406ed7b8ba9e09708da8e2d38f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4201
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Last-Modified: Wed, 28 Sep 2022 15:24:18 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2330
Expires: Wed, 28 Sep 2022 17:13:09 GMT
Date: Wed, 28 Sep 2022 16:34:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2330
Expires: Wed, 28 Sep 2022 17:13:09 GMT
Date: Wed, 28 Sep 2022 16:34:19 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/favicon.ico
200 OK 0 B URL HTTP/1.1 dbluemarketing.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:19 GMT
Server: Apache
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: image/vnd.microsoft.icon
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad84ed0c5b2090df7996007514cf1984
651600f2ef18cecc2e38370069bbb5e1d86f68e0
a3d0729e1d43afeadd2dd8273c858b8839d9e476f773c8ec9d96b5969a9e0b4a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13299
x-amzn-requestid: 926df8b6-beec-470d-b0b3-33be326cd379
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UPF8YIAMF3Nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-343e91e735af43d01fc83ddd;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KmVkKXoPqZmnwFtpKhuox1kJNDoSxMEmYE39_zVPyaeoU4sPqq-_wA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:44:23 GMT
age: 67796
etag: "651600f2ef18cecc2e38370069bbb5e1d86f68e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b794c6812cb546de0295e087ebe66a7
a54803cca7d3c509c195f65961e1110c8ec56f55
6a207f75eb3951f3dea5252bc8d185cd604d3d657f15b838774e8087e91f37f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12016
x-amzn-requestid: ec1b3715-5d0f-4045-aa5b-b70a55c81d72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3EtyIAMFdZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-201dd1ef1426a09965c68dab;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: y3DefdcXJyoDHpJXwz460gfWcv2JUboOFExNQmTFgy30B4mn54Xvuw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:44:30 GMT
age: 67789
etag: "a54803cca7d3c509c195f65961e1110c8ec56f55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6139c878a7d2bd32c61fc8287996eb5b
9c4692ea64832895fbd107d91f879728b6a440c7
3839df92f0a10c1433d5b576df50c9f7953912ae4f425012262f08ee8a59ce2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: af82c8d6-950c-4933-87e3-7bbb15cb1ac8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HOaoAMFoPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-77e0ecc522de575e40f429b3;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: rD5LsVDLQkaomG1nCGZGihbdlWKMCjUYNC2kRyAjJesJEOEBSj8Q3A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:47:03 GMT
age: 67636
etag: "9c4692ea64832895fbd107d91f879728b6a440c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea3890e460356d6ecc3ba4e405ac2e9e
b383135e2ebc23fe80eb0d594b198cb8c89327a5
8fcff053ce6e5750136bf876bad5b2916935f13ea039912d977928b086f0a48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: e99c9f33-b72a-4070-80cf-06fb4a87d1df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZG4S6EcAoAMFX1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6332a0df-04122b4a345dbc3f3918af98;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 07:06:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Di1kDUlYEc1rv31fHM-OquU_W_LggEzDCTVME5iFJ5KffZcQyN6i2A==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 07:31:39 GMT
age: 32560
etag: "b383135e2ebc23fe80eb0d594b198cb8c89327a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rV80hKsopWPf_A8hKw0kwTOjVN4Bq-5f8oXDP2wluyGwof5yXFe2Bw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:42:47 GMT
age: 67892
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/uploads/2019/06/lamdafx_png-logo-small.png
200 OK 259 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/lamdafx_png-logo-small.png
IP
File type PNG image data, 300 x 203, 8-bit/color RGBA, non-interlaced\012- data
Size 259 kB (258807 bytes)
Hash 40eba65d198f0e391d5dc0e0d845c1f3
d61cf55929541de2320f82f90a6c290f87dccbff
66509c884124b5510ca36b1856257c502773986d4c87448c34c176695c9819fe
GET /wp-content/uploads/2019/06/lamdafx_png-logo-small.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 16:34:19 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:13 GMT
Accept-Ranges: bytes
Content-Length: 258807
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa5cad224dbddd71881bd07255beb4da
bc214d60be395d4cf753216ff8f9691c33d25e75
82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14464
x-amzn-requestid: 6627e07e-034b-432e-ab9e-afe035fa0b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e9HgIoAMFxUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-7f34c3f6454379724a7ac413;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: J27vcANRhkMUuGwTZjXkO0EF0-UjN-MODVQRKgsc7hJI2S-UPF8Ctw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:53 GMT
age: 68006
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1002090849/?random=1664382856836&cv=9&fst=1664382856836&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1002090849/?random=1664382856836&cv=9&fst=1664382856836&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2284), with no line terminators
Hash 00b37b0ac6ade8a1fadad25b78749d5c
c381132a9e5f0503c14fddf93857e097ca16d472
bcb33549b5a7a3744033fdec1713a6615f54854b02f015cfde26c3af33befc42
GET /pagead/viewthroughconversion/1002090849/?random=1664382856836&cv=9&fst=1664382856836&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 16:34:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1046
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Sep-2022 16:49:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b7ed37e03b72b8da3fb7f6c476ae9a1f
c335157b42102c71f5431bc295b2b2542af781d4
66ad71fe8fc69a39c7852c1b8e1fe1308e8ccaf2a147ed1c3a6866d3b248f9a3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1002090849/?random=1664382856836&cv=9&fst=1664380800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=1693810865&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1002090849/?random=1664382856836&cv=9&fst=1664380800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=1693810865&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1002090849/?random=1664382856836&cv=9&fst=1664380800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=1693810865&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 16:34:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64efebb51e5b4f12f97825c5944d0cfa
fc6830187fd786f3d7fefeda96bf0fbe15509927
a33a76aa921357b856b0f68c84f500cd12c40cce3172723b8cd77c250422ac43
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 16:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664382857085&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664382857084.1876647212&it=1664382856853&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664382857085&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664382857084.1876647212&it=1664382856853&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664382857085&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664382857084.1876647212&it=1664382856853&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Wed, 28 Sep 2022 16:34:19 GMT
X-Firefox-Spdy: h2
70.39.251.193
93.184.220.29
157.240.200.14
23.36.77.32
0.0.0.0