dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
301 Moved Permanently 300 B URL HTTP/1.1 dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 371cec0a02e7dd161120b5f6c54194f5
d6d6609b7fa26f47ef38997c77605ff537b7c40d
91181aebabd2409f5be8eb45008e6d2f0a6899e6e057d86895ab2ec3bd0bd53a
Analyzer Verdict Alert fortinet Phishing
GET /uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 01 Oct 2022 15:41:49 GMT
Server: Apache
Location: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Content-Length: 300
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 60e4edea7b5f4d19f3547a3bb2d5df57
3ee076bab4da3416c2c5808f730cb316c28baef7
763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10118
Expires: Sat, 01 Oct 2022 18:30:27 GMT
Date: Sat, 01 Oct 2022 15:41:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 01 Oct 2022 15:02:34 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 cb9d66c261e91793be744f629d6e309e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: OPByLqkW8pekTsS1b6I_MYnAghXhtfGegjbi8mnabrE2HFgJrbjyJg==
Age: 2355
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 03:39:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 ee8862e43d7837ef5478becfe2eb7116.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: IJ_JkhkdEmxebXjBIn-KsN7r1zMjT1s6T8YPbpPd5cK281_-yo4uhw==
age: 43713
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 01 Oct 2022 15:41:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sat, 01 Oct 2022 15:32:54 GMT
Expires: Sat, 01 Oct 2022 15:33:29 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6fa2f2520e1a521d933565337b2b81de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: J0Mms4s4Z26gUWOKzvZLcYcqtI1FRLGt9CKJVCLC0KZTCZiSmV5mSw==
Age: 535
ocsp.digicert.com/
200 OK 471 B IP
Hash 829e839c217bf861b8cf90c8d636f510
459714fcf0d374bdc078ef59d122d59bf9312c5f
36282e09bb25caf3d7350c4bee485cb87947aabc7d7409169caf15c2e75d8b7d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4233
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:50 GMT
Last-Modified: Sat, 01 Oct 2022 14:31:17 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
404 Not Found 30 kB URL HTTP/1.1 dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1782), with CRLF, LF line terminators
Hash aab5df9f41898cb6507f57cd8a2ad277
f657435b2bcc1df93ead75574719f3c6dec2681e
aebc44701ab7123b59f278952b0aeaef17a0288e4bb26eedf04e8c8739d98153
Analyzer Verdict Alert fortinet Phishing
GET /uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Sat, 01 Oct 2022 15:41:49 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dbluemarketing.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
dbluemarketing.com/wp-includes/css/dist/block-library/style.min.css?ver=5.0.17
200 OK 26 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/css/dist/block-library/style.min.css?ver=5.0.17
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash eb1a96949e0ea0d08033d3f941bf1f3e
8e8e16cd9105066fe8dc4f80ace8010d060f08f4
1698abe528bb1f8e76991814a09aacb0ec7247d421ed2e4ff8f00e3fb1275712
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:39 GMT
Accept-Ranges: bytes
Content-Length: 25658
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1384e669a9e259cccf32489be673e7c4
7f982ae66621ff7e5855f2b025e3ae034706ec33
eb462a28dbd7e93cd13a170acfcbf35babb3b7ef7e7d1ddeb30d377630ea30f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2601db85aa6894ea41f37fc0c1f2594a
afc9de950cf648d720a78467582b26346b8d53bc
3211c5c61098100152ea682c86ec84f3a80229b8d709e5cbe0022caba7dc9e24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: A/29AJtV8VdVwI5D9b0aZA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: S5oKMC7dHIv/tFaw95SQm9MKGC0=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83f9407574c75ca600c57af0637cb200
4ebabbc1900b8f575e90186e2024e48097b0c8d2
1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WHW8R5K
200 OK 56 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WHW8R5K
IP
File type ASCII text, with very long lines (2039)
Hash 4f7bd821b3e5359f1e38486c7e6b910a
072cd67e88023581d3ffbb93e0bbd8098d3a4e2d
88481b699d3ffe77cf549594277e30829c5130ecef7f5b900fa7ddbe66d36bbe
GET /gtm.js?id=GTM-WHW8R5K HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 01 Oct 2022 15:41:50 GMT
expires: Sat, 01 Oct 2022 15:41:50 GMT
cache-control: private, max-age=900
last-modified: Sat, 01 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55882
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
IP
Hash 0fe667f25cacd7a22fe7422c1f594a7d
1a0eb97c9e63bf0aa84f5316dcc4e11994bd6be2
9962e7ec063ae1b4f87238d2bf75543184cb82948b3cfa0aa5dca7de188545e5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:33:59 GMT
Accept-Ranges: bytes
Content-Length: 10101
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
fonts.googleapis.com/css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17
200 OK 819 B URL HTTP/2 fonts.googleapis.com/css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17
IP
Hash ea26084a7ee16febf7b98dca9d7070a7
70a1c8744a38378b61f8241c466e4c7118feb5e5
f301a8c7a951d7db7840276edc0f0495ae2c09f51843f922d2978e12e3cb53e0
GET /css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 01 Oct 2022 15:41:50 GMT
date: Sat, 01 Oct 2022 15:41:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15
200 OK 4.5 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15
IP
Hash 56b98e1ea752f518c2d4dc18b47c79e0
d7b8d81523ddb5232b3051e850e71f3ba0e521e8
6baa10abfc0f43f7b087e4e07dd46fc63911a19744799a5c79acba4c13175fd9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:28 GMT
Accept-Ranges: bytes
Content-Length: 4514
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15
200 OK 8.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15
IP
File type ASCII text, with very long lines (776)
Hash 2837f27759ecfaf6107fc9bff9ad4623
5a875fc10f5c7e91772ba5a52d627da1572d294c
e41aa4bbd652e8426528cd8f98c531fa4bafd3ad65cbeaeea7c931ca8aa105fe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:29 GMT
Accept-Ranges: bytes
Content-Length: 8362
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 17:54:12 GMT
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15
200 OK 6.2 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15
IP
Hash b7f7a59349cf1d6d37822acd901b897f
e5bc14bc804e25f35311bbaa04b339ff85fc5634
7a837b776636532b1285a0538cc6819203d005abe0ebc552dd349ebeec51dfe3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:45 GMT
Accept-Ranges: bytes
Content-Length: 6183
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15
200 OK 13 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15
IP
Hash 134d36ccd55a3865fccee8ffa9840c2f
cc10fbd8363394dae26d6a954f27d2b7cf8e5a14
bbf8b025f38fc6aef74423424106cc06be1b91e2c794cff8d9bf1e5b9a3ddfbb
GET /wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:29 GMT
Accept-Ranges: bytes
Content-Length: 13224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
200 OK 28 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
IP
Hash 9609f7e7d295c7228a85b050d947c822
02ebd37aaf99e4bd3b01c7a76c3300ef94c34cb4
88919c061becf91230051c714af2770d3d496c0ad35ac6081e7bd778ac3d22f6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 19:06:52 GMT
Accept-Ranges: bytes
Content-Length: 27506
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 97 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash dc5ba5044fccc0297be7b262ce669a7c
f137ff98ae379e35b0702967d3b6866a0a40e3be
cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 17:54:14 GMT
Accept-Ranges: bytes
Content-Length: 96874
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15
200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15
IP
File type ASCII text, with very long lines (10126)
Hash b34754baa665255accae552a1da39ef0
c1b6e804a7ca05f09a3f80ec7c5d926966063dbe
9c12c1ab49081580907c9927752e7b7bb510a148710be87c03b6fb7d79632c32
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 10215
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15
200 OK 6.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15
IP
File type ASCII text, with very long lines (6322)
Hash 63d1efa154bd0728b1dcb3c4abee929d
b29b779e8b5fc5809e25343858a7d73ee4c93a02
d50e992ac846d1a23ac3fde9ddc997a572fc65702611c667b0a758cf8ee99083
GET /wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 6418
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15
200 OK 25 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15
IP
File type ASCII text, with very long lines (24110)
Hash c0efc8c25969b270348069a176e93f8c
39680ef85bdbec350f35e41de4bfca303f5dc34f
db06dcfa0112b05cef7abd20fadc5baf632a316515f07cfd4fceb436c8a0cb1b
GET /wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 25168
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
200 OK 7.6 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
IP
Hash a20ccc97b8ab6324adeb56fa34a04c55
bd9ceb6f34eac052e13bb21f76ce83f7334841d2
19e3bcd44b9c726bc12f4138ee4dece9f85487a7b54ea467f6444e323de2207f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 7583
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15
200 OK 7.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15
IP
Hash ac64ec723cd0e47a8885ec1de47b69ed
20153b749d38915c7546bdc743d0e669bac051ab
3aa74777e9e4c823d67f704e4e35d820ad70b8363c403580d8e8bf7a9d2449c8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:46 GMT
Accept-Ranges: bytes
Content-Length: 7381
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/wp-emoji-release.min.js?ver=5.0.17
200 OK 12 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/wp-emoji-release.min.js?ver=5.0.17
IP
File type ASCII text, with very long lines (9063)
Hash fe0575b66568074463f12485d90f6d4c
aeedd9ab3b7874e63f647042963cb1301a38b391
647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 06:07:30 GMT
Accept-Ranges: bytes
Content-Length: 11943
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
200 OK 122 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
IP
File type ASCII text, with very long lines (65371)
Size 122 kB (122540 bytes)
Hash 5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87
GET /wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:00 GMT
Accept-Ranges: bytes
Content-Length: 122540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/themes/BlueMDeep/js/temp.js?ver=1.0
200 OK 879 B URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/js/temp.js?ver=1.0
IP
Hash c4f5e8e61f2949f5f57c5c9895baee4c
061ef5019c9d9c61c1e0947ef22ae788f813bc1b
2016efd04ddb0018166d9c648e6e86e63c04c78eb37dcd3b23543111a8ec05ad
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/js/temp.js?ver=1.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:09 GMT
Accept-Ranges: bytes
Content-Length: 879
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/wp-embed.min.js?ver=5.0.17
200 OK 1.4 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/wp-embed.min.js?ver=5.0.17
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash 570ae0f3c201604926ea599d3d1f6c04
2c29243a73660964d4712b969d2a15e27777bc14
5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-embed.min.js?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 06:07:30 GMT
Accept-Ranges: bytes
Content-Length: 1391
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0
200 OK 37 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0
IP
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:08 GMT
Accept-Ranges: bytes
Content-Length: 36816
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/uploads/2016/01/goulashlogo-300x87.png
200 OK 20 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/goulashlogo-300x87.png
IP
File type PNG image data, 300 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash 303492d2fe5ea3e53fbe626a75868015
cb61a0be7be3cbccf2561caf42faa1dfc05d2c6c
dbbd0ceb34e5215d6d23b80c064c137c2b549b113dab630c8d39b754f44fd223
GET /wp-content/uploads/2016/01/goulashlogo-300x87.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:16 GMT
Accept-Ranges: bytes
Content-Length: 20081
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/page-logo.png
200 OK 32 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/page-logo.png
IP
File type PNG image data, 279 x 269, 8-bit/color RGBA, non-interlaced\012- data
Hash 1162ec5908b9b4c7872cdb8d5b5dd0b1
09bc27fcf17e28e975f9acb088312224aa363a3a
9ac1d40a9cdb230082d0bce887a0e6b6acc1aa1a5eb9b166b950ceab12e4fdfc
GET /wp-content/uploads/2016/01/page-logo.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:17 GMT
Accept-Ranges: bytes
Content-Length: 31948
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/merlot-logo-300x88.png
200 OK 19 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/merlot-logo-300x88.png
IP
File type PNG image data, 300 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d1000e7afbf62d3c7e6451d5340c9dd
46e64ecff1af44bdceab43884f67f02be09c167d
38b1b484af18b163395937f98eaee36ae2bf9e3f2d649af50b086b6c6362d0fb
GET /wp-content/uploads/2016/01/merlot-logo-300x88.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:16 GMT
Accept-Ranges: bytes
Content-Length: 19321
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/coffeelogo-300x89.png
200 OK 21 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/coffeelogo-300x89.png
IP
File type PNG image data, 300 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 32727ac4121f5218248de08637c22ad5
e2ba87ad031c37cd916e7986ba7e25d465bce02c
a16ddd8755a2f4e90e61cb09e9fc9280286062a575dba77be4947adc4f461757
GET /wp-content/uploads/2016/01/coffeelogo-300x89.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:15 GMT
Accept-Ranges: bytes
Content-Length: 20786
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:03 GMT
Accept-Ranges: bytes
Content-Length: 18028
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2
dbluemarketing.com/wp-content/uploads/2016/02/1454432292_home.png
200 OK 466 B URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/02/1454432292_home.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash a1b6e9a138ea8e05a5ee3077a1d4789a
389b1079932a10e391b64c3181110f0f2dea3b97
c41894ea5ed0bad49046913b8bde2bc6e33a7c5cdd8ea4ce401ffc6db06c23ef
GET /wp-content/uploads/2016/02/1454432292_home.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:19 GMT
Accept-Ranges: bytes
Content-Length: 466
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png
200 OK 22 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png
IP
File type PNG image data, 270 x 146, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e0ae9ff11312f00c698acaac545f29e
7f510e68d46761e0d8908a184bbada7da236e820
83f5fe833b039f8964223468ed8b85c128e3e55a218ce84af094e587da4086f4
GET /wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:04 GMT
Accept-Ranges: bytes
Content-Length: 22165
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/02/58v_ewEI.jpg
200 OK 18 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/02/58v_ewEI.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3\012- data
Hash f4293771945e46eb6f36247afd539995
d159cfc0cfcb15d512438d5431011a79f7f4962c
8ff13d28832dd3e0722ec3f9a41fe1cf7551c6b2fc3459c8f762e3d68534f0c7
GET /wp-content/uploads/2018/02/58v_ewEI.jpg HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:03 GMT
Accept-Ranges: bytes
Content-Length: 18136
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
dbluemarketing.com/wp-content/uploads/2018/11/FixThat-logo.jpg
200 OK 14 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/11/FixThat-logo.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 492x492, components 3\012- data
Hash 3d36a8d127f0a8c8fe29ea27445f33d3
75daf935b6e2e56e3a98b2c12977e1819e73a114
6171a6bc1c240147c5e9358be717e77490d349e8070f462c0ab6286ff2ba7b9e
GET /wp-content/uploads/2018/11/FixThat-logo.jpg HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:51 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:06 GMT
Accept-Ranges: bytes
Content-Length: 13563
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf
200 OK 645 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf
IP
File type TrueType Font data, 16 tables, 1st "GPOS", 34 names, Macintosh, Copyright (c) 2011-2015 by tyPoland Lukasz Dziedzic (http://www.typoland.com/) with Reserved Fon\012- data
Size 645 kB (644556 bytes)
Hash 90e1d3559ac52f7f0f77a86e1bfd632d
a405c8288a8a90881407f93b6ee02b29e26a8735
e9d59afb6d9cb9cf6e8d8159d4639d5b577e29efc64a15182f228659cfc1e818
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:05 GMT
Accept-Ranges: bytes
Content-Length: 644556
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: font/ttf
dbluemarketing.com/wp-content/uploads/2019/06/FBX-Logo.png
200 OK 72 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/FBX-Logo.png
IP
File type PNG image data, 977 x 567, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d01115245f370cf79fba51a226b225c
14c8ec8c118df3e06eab3ae711ddb7bb9b5d5818
5c896a78ae531b4c07affe4347dcbc8b293de9b4716d87fb574491286b0716e0
GET /wp-content/uploads/2019/06/FBX-Logo.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:50 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:09 GMT
Accept-Ranges: bytes
Content-Length: 72402
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2019/06/MGfav-01.png
200 OK 13 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/MGfav-01.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash b84990b94151434dfc9de9b2b13009f8
1a3f5d808c7e130608e39b8223c5d9ecebb961dd
d7b0957e169881a97db260b96ea21aa580381e056517ed9194077f7c94cfa060
GET /wp-content/uploads/2019/06/MGfav-01.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:51 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:12 GMT
Accept-Ranges: bytes
Content-Length: 12744
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sat, 01 Oct 2022 14:41:09 GMT
expires: Sat, 01 Oct 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 3642
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 102339c27bf38fcad96c5e3770390f7e
5659e8cdb740d70125a002f4808b26742133df7b
50702b9a98cf450498c52ad4887ed4e3f8a994f6bd25b6ff17c27d5af63b5e65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash a342dc87da447524185a412785fd28e6
bbc7bfb8d9921d075db34aff0177a0f64150e67d
ad4b2580384bcfa9b6bb666a927225cf5af5a844e0e0a092578105eb12b87ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5939
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Last-Modified: Sat, 01 Oct 2022 14:02:52 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 01 Oct 2022 15:41:51 GMT
expires: Sat, 01 Oct 2022 15:41:51 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/uploads/2019/06/lamdafx_png-logo-small.png
200 OK 259 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/lamdafx_png-logo-small.png
IP
File type PNG image data, 300 x 203, 8-bit/color RGBA, non-interlaced\012- data
Size 259 kB (258807 bytes)
Hash 40eba65d198f0e391d5dc0e0d845c1f3
d61cf55929541de2320f82f90a6c290f87dccbff
66509c884124b5510ca36b1856257c502773986d4c87448c34c176695c9819fe
GET /wp-content/uploads/2019/06/lamdafx_png-logo-small.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:51 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:13 GMT
Accept-Ranges: bytes
Content-Length: 258807
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: T1kO5HD68YJxF4352GOEXc8Ymr41B/V1NtwdvBLnYIF76RaQlYEp4LCHhlJOI2em5m2V3+WhEYi2D9xxMOSi9g==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1679558926
date: Sat, 01 Oct 2022 15:41:51 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a342dc87da447524185a412785fd28e6
bbc7bfb8d9921d075db34aff0177a0f64150e67d
ad4b2580384bcfa9b6bb666a927225cf5af5a844e0e0a092578105eb12b87ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5939
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Last-Modified: Sat, 01 Oct 2022 14:02:52 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9258de3968ca063250558ee06c75757b
56415f416ce29130b0a0b6fc919e2cdc0fd4d693
2474d99b3d10370e1efad3804a6f32452287e6b8e24d8254c69e8619a62624d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/favicon.ico
200 OK 0 B URL HTTP/1.1 dbluemarketing.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 15:41:51 GMT
Server: Apache
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: image/vnd.microsoft.icon
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7e9ce4f67540be7dc1efdf5cec1ea9d7
a34d70d3a259c0042b32053db9b84340fda551f3
30986769ce7f866e0f8e9c4733512ad9b83acb983663b0d9ef49bd0871e9cfb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1002090849/?random=1664638907779&cv=9&fst=1664638907779&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1002090849/?random=1664638907779&cv=9&fst=1664638907779&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2284), with no line terminators
Hash 3ddd48803eaac3b8f791e34453c8d994
46f1ff3cc80bee66c23a65b3c0850f6eb5b9dc76
47edd4e1037f2acd06d8505231a0c956556bd32c179f87d3f38cf8110ee2b549
GET /pagead/viewthroughconversion/1002090849/?random=1664638907779&cv=9&fst=1664638907779&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 01 Oct 2022 15:41:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1045
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 01-Oct-2022 15:56:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14804
Expires: Sat, 01 Oct 2022 19:48:35 GMT
Date: Sat, 01 Oct 2022 15:41:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14804
Expires: Sat, 01 Oct 2022 19:48:35 GMT
Date: Sat, 01 Oct 2022 15:41:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14804
Expires: Sat, 01 Oct 2022 19:48:35 GMT
Date: Sat, 01 Oct 2022 15:41:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fc3f7b5-4c80-4662-ba8b-7997bdbdb6a3.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fc3f7b5-4c80-4662-ba8b-7997bdbdb6a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d31a422078d02bda318c693c05a58dc
2df7db53629c7adda2c0a4dfe9c17791b73a75e1
a07fe4e135b52da6dfa9d8a55684f0a3bf5f5ce52c4064c8ab37836a939902a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fc3f7b5-4c80-4662-ba8b-7997bdbdb6a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8299
x-amzn-requestid: 91eed6b6-632f-472b-93d7-4192425fcdfd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZSxLDF0SoAMFWgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63376246-17bb04894cc786555d693ec3;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 21:40:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 8JvNUZRyYeZjd4ZxOrGMCbJxVf46NRhiHXsFvCAZn2QeUkdCzKoYbw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 22:15:58 GMT
age: 62753
etag: "2df7db53629c7adda2c0a4dfe9c17791b73a75e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03e4f558-3c34-42eb-aa43-9896f0e6ce87.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03e4f558-3c34-42eb-aa43-9896f0e6ce87.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 574cd0b975349cc445e798136863c8a0
74c20bb0c312988822deb9d46b20e4642357fbd7
62d6448a8da1ed783761e1e966c3f03f2d9b4351e04e13e71e330e4cce465fc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03e4f558-3c34-42eb-aa43-9896f0e6ce87.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8269
x-amzn-requestid: 2ff31dda-d215-42fb-a439-de67799ebeb1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y8dqPFvQIAMFxlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e7641-2c2e3443499003525414587b;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 03:15:13 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: btbI_vFcRysDsOGN3zHGO3PEnzCG8XZyV7E65PB1bwBab86rJM79ZQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 22:16:06 GMT
age: 62745
etag: "74c20bb0c312988822deb9d46b20e4642357fbd7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: f0791b53-3c5f-4d94-954d-992a529ebb60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPnunF35oAMFYbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361ff6-2adb303349153ced73ccecf6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 22:45:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RGS_T9Cwl5Vjs_bxngHRomiYppE5fLe0SnH19VEfc5-PCT5tb5ku1A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 04:40:52 GMT
age: 39659
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb90508fe-e6b6-4ad0-9afc-67b46e4d0aa4.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb90508fe-e6b6-4ad0-9afc-67b46e4d0aa4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c475b8cc11fdaabbda170c6605d1391
7eea9aa04c5a72c417a580ca45341a0b5adc72cf
888de88ddad429a0bdb565b1f069dab4bea55a3b8a662c4efd9b75fd261dee3b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb90508fe-e6b6-4ad0-9afc-67b46e4d0aa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8734
x-amzn-requestid: abef68e4-c2c6-4551-babc-125c93c1506d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZSz0UECTIAMF3BA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63376681-5090c08a3349bb8715d3c579;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 21:58:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pAnOlf78Pu-hwBIKm002F4z1G8Q1pshDOPxwIQ81Yu6HzIT-0PJt1Q==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 22:22:17 GMT
age: 62374
etag: "7eea9aa04c5a72c417a580ca45341a0b5adc72cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae73d97-d8e4-4f93-bf30-c175fc72b008.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae73d97-d8e4-4f93-bf30-c175fc72b008.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4be456dbe857580c7b4c7fca3936e04e
49798c4a15545a49f3870b2a16af78dbf8e168cc
23e42987d5e9939424d5f4e4fe0c38faf20a221732097927dd4a656199d9d315
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae73d97-d8e4-4f93-bf30-c175fc72b008.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10201
x-amzn-requestid: 62562627-78a8-4c17-bf6c-b2c986b9ee8f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZSxLCFH3IAMFoFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63376246-69637d745165485171ca73b9;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 21:40:22 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CueKD4mKZFXrPdwSOtYV3muaegRDOA632EztOt22qrk0Qd2yj1oPkg==
via: 1.1 6a63e853422f3197776fb098fab5a416.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 21:57:18 GMT
age: 63873
etag: "49798c4a15545a49f3870b2a16af78dbf8e168cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c120ef4802f4eb64e93225496ba6944a
cdebb30349fa79f7ddb7d13aac47735565ac0ba2
1bcd7dc722018962f16783f0f888742a7926c0a7e466deef174f0f4fc5eb4a4e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 13447c24eb9845d6e3463ef34828eb7c
658985ed382874269a9011a9216371e3b0b31448
3c31e91637b1337b450f85d0bb296d0554498b00df38a983151ae8d63c03b66b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1002090849/?random=1664638907779&cv=9&fst=1664636400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=3812899250&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1002090849/?random=1664638907779&cv=9&fst=1664636400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=3812899250&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1002090849/?random=1664638907779&cv=9&fst=1664636400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=3812899250&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 01 Oct 2022 15:41:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 13447c24eb9845d6e3463ef34828eb7c
658985ed382874269a9011a9216371e3b0b31448
3c31e91637b1337b450f85d0bb296d0554498b00df38a983151ae8d63c03b66b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 15:41:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664638908032&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664638908031.1077138148&it=1664638907817&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664638908032&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664638908031.1077138148&it=1664638907817&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664638908032&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664638908031.1077138148&it=1664638907817&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sat, 01 Oct 2022 15:41:51 GMT
X-Firefox-Spdy: h2
70.39.251.193
157.240.221.35
23.36.77.32