| firefox.settings.services.mozilla.com/v1/ |  143.204.55.36 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash91dd975a7b17b2922dd23c0e49314e40 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 03 Sep 2022 22:43:29 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _TE0-EWJl-7oV2Mgv7hV6QckZwJrr45gCD-bKaROgAD0gmt2Gg_fLA==
Age: 1801
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbcdebf7a2bad5db595e8a0c1abb2ddcb 249dda2fa5e37b8a8f3a8c797193bf0874b6eedc 9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6624
Expires: Sun, 04 Sep 2022 01:03:54 GMT
Date: Sat, 03 Sep 2022 23:13:30 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.25 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.25:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TXPmbyshGl8SMxtbtjKy_9eWxubAv192pjLw9krlagzGluoBiItzKw==
age: 79093
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 23:13:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.36 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 03 Sep 2022 22:38:16 GMT
Expires: Sat, 03 Sep 2022 22:46:04 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: d47obaMvHiOgmcIR-H8FY9j2j_hFVHgdc4xENevSCaOHW9yFDGqqwA==
Age: 2114
|
|
| www.bluehorse.in/blog/securing | 162.241.194.56 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www.bluehorse.in/blog/securing IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /blog/securing HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Sep 2022 23:13:30 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Set-Cookie: ppwp_wp_session=5c9fba69fa2716854301d2386725476e%7C%7C1662248610%7C%7C1662248250; expires=Sat, 03-Sep-2022 23:43:30 GMT; Max-Age=1800; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4fc12f0a98aa28ccb56e0b56d7e40ded f7efcfb8b4f4aa40268bada3fec380820a70ee35 a34aa9b7db949a583c3f1b4d87fed415a11d119c9615b5e710c3125173f8a277
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5256
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:31 GMT
Last-Modified: Sat, 03 Sep 2022 21:45:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd8a8e1660a78aa5efe8e9a5e113ca5cf 97dc3d532cfd5508a38a61f7601e3c090576f109 97d67f1547ec530fb3a68027f865b349b10452157f468556666ce8933f45a2da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "97D67F1547EC530FB3A68027F865B349B10452157F468556666CE8933F45A2DA"
Last-Modified: Sat, 03 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Sun, 04 Sep 2022 05:13:23 GMT
Date: Sat, 03 Sep 2022 23:13:31 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 54.148.228.200 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.228.200:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +qoxhVbCtArOWIKAed9iTQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +hvElQlyzqjV1eW5xpUOH9Fa7tY=
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css |  104.17.25.14 | 200 OK | 5.6 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP104.17.25.14:0
File typeASCII text, with very long lines (30837) Hash109d1ed85cd01f9cdab73a4cac5bf80d d6c6498ad46de2d8e2008a8ff68e364ae7f16b32 8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:32 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 73369
expires: Thu, 24 Aug 2023 23:13:32 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bvr8LqPnJNB4uOgGUfaKV7n7vx1RnC%2BDvHdfIMd6pWRYGKyL%2FDgcoM3FCoMFvPfUgVvY4Wf4efRZIEmZjbQfMG5yiCwLW0Quvoa5TGeK1ZRGtUVgU3jDqWTayfY1LnUyoQb3QQeq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74522d2ffaa8b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash9439a7cde73fea464c1463febdda0556 6a0030d4f26b2e9658700708c82e7ce6120ce93c c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashcc6ea3e01d1d6b8c4b28ff64d3b795a7 017457c6f5a63157102485a956c667aad36d33ef e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash1278db78948279716d72ac203ad8fb0d 1746b9863b781ed9a0c26a126b9b80d36c903974 8d9e31a35490bc2ebef4c4c2152c89b62491c0cdfc31ec0594bc21fd2e9f43f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash9439a7cde73fea464c1463febdda0556 6a0030d4f26b2e9658700708c82e7ce6120ce93c c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash9439a7cde73fea464c1463febdda0556 6a0030d4f26b2e9658700708c82e7ce6120ce93c c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/bootstrap-theme.min.css | 162.241.194.56 | 200 OK | 3.7 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/bootstrap-theme.min.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19798), with CRLF line terminators Hash44c0222e80780de4913f2b1f92876d68 367d29a6d58451cada50f70b41ea61a6c26b1277 4613ac3b34dac3940ce98a607a8f2f2f5ab403571e59252fa6f7c9afc7bea524
GET /wp-content/themes/bluehorse/css/bootstrap-theme.min.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 3696
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.164 | 200 OK | 553 B |
URL HTTP/2www.google.com/recaptcha/api.js IP142.250.74.164:0
File typeASCII text, with very long lines (850), with no line terminators Hash528455474b03fa8ad71a558347e43fe1 597b34487415fa60028f80afd7ab2cf27383ace5 af9ee6f9ce7bd44e5dbbfcab2a528e062f9dec4640a98a396170d46c494dafb5
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 03 Sep 2022 23:13:32 GMT
date: Sat, 03 Sep 2022 23:13:32 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?onload=myCallBack&render=explicit | 142.250.74.164 | 200 OK | 579 B |
URL HTTP/2www.google.com/recaptcha/api.js?onload=myCallBack&render=explicit IP142.250.74.164:0
File typeASCII text, with very long lines (905), with no line terminators Hash25c51197552843702b5968fe9abc4828 df535156ba427d9108841490edd5e951323a92a8 444859b0d74dfd7e86e141562a3c0c56c389e8bdafe4362d054c4e2f11aec875
GET /recaptcha/api.js?onload=myCallBack&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 03 Sep 2022 23:13:32 GMT
date: Sat, 03 Sep 2022 23:13:32 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 579
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/font-awesome.min.css | 162.241.194.56 | 200 OK | 6.1 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/font-awesome.min.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (26548), with CRLF line terminators Hash9c406f44502c561e3d5436e926d2eab7 b9231e9c6608eeddfc10b5f8409cb043ecca59da 14a0760a375ea5a190763188eafa6edb93a1e68e1a542935d441763188a3d6d3
GET /wp-content/themes/bluehorse/css/font-awesome.min.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 6089
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/new-menu.css | 162.241.194.56 | 200 OK | 1.2 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/new-menu.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash08f0849513f5e82e1cf41be2e1e75e05 ea2da3f08a9f74b3a9817ef006a2799daa07d21e 6630d82f61421b00f3cc4153515040d02a4520651c3911bbb677ceb9a67f0aaa
GET /wp-content/themes/bluehorse/css/new-menu.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 1198
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-4K9TRK6PV6 | 142.250.74.72 | 200 OK | 74 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-4K9TRK6PV6 IP142.250.74.72:0
File typeASCII text, with very long lines (15517) Hasha8f299f66ef2c62be3aa9eaff855dc0f 5b10af438c2537c37b023f78ce8d87415e98b377 2b021c37f309fd29099d9a2e6d9f87772bb96f78addf19d53820ca1db5f8ea06
GET /gtag/js?id=G-4K9TRK6PV6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Sep 2022 23:13:32 GMT
expires: Sat, 03 Sep 2022 23:13:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74094
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash51df98c169fb7de773301d014bcea4b8 9bdf9bdb9b5eee378e9ac4ec68ca07c665ae4819 c8336f3a2e16c9390b610c612ce9be7c19286f04a6328a29200cbf65db5801c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash9439a7cde73fea464c1463febdda0556 6a0030d4f26b2e9658700708c82e7ce6120ce93c c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashcc6ea3e01d1d6b8c4b28ff64d3b795a7 017457c6f5a63157102485a956c667aad36d33ef e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bluehorse.in/wp-content/themes/bluehorse/js/ie-emulation-modes-warning.js | 162.241.194.56 | 200 OK | 1.1 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/js/ie-emulation-modes-warning.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash72eba5ffde50ac9fe67cb17c47dc5f6c 6f660fbfc3b8ad6f383fba5f6565c169b21f0ed5 dd1958fd109b97817eabf0cd3db228ea9db04db02a9e3eef35578106c9d9d2aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/js/ie-emulation-modes-warning.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 16:10:02 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 1077
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/navbar-static-top.css | 162.241.194.56 | 200 OK | 446 B |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/navbar-static-top.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashdc97c9e98085318ad09a3b4cc3414709 6b3b4657f7b948696da8f3cb2b3fc6bdcafbe6fe abe9d347b6b6142956b545c80b5a3d52ec85331ba873584aca4998a461573bdb
GET /wp-content/themes/bluehorse/css/navbar-static-top.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 446
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/js/jquery.isotope.js | 162.241.194.56 | 200 OK | 14 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/js/jquery.isotope.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document text\012- HTML document, ASCII text Hash4a3663a474503a1903335205deb36b6a 0fefcb09160fd5f1850333868edc63a6b6778e8e b8e9dd9454c689da0ace2a067bd1f03b386393d4377db4a2408f46a756af4173
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/js/jquery.isotope.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 16:13:02 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 14333
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/carousel.css | 162.241.194.56 | 200 OK | 1.0 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/carousel.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hashd04ffbefdef842c46dbc19cc66fbf6d8 830d45a6e98f2e44a91e5e33b0a4327fe04ea6c0 4505543d51363144efb2a4619592c2b4ca9f6b11bfb41908aaf71eeba3fbd793
GET /wp-content/themes/bluehorse/css/carousel.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 1023
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/isotope.css | 162.241.194.56 | 200 OK | 650 B |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/isotope.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash1bcdbece24cb63be848a0f9a85c62f7c 70e753b9d87de9f725eb08dd0d7f730db90846dd 79110a3b7498b3a7ee82a6c7a98097647c9d8ee7b8008b31db0f685af2fe2323
GET /wp-content/themes/bluehorse/css/isotope.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 650
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/social-share-button/assets/front/css/style.css?ver=5.8 | 162.241.194.56 | 200 OK | 212 B |
URL HTTP/2bluehorse.in/wp-content/plugins/social-share-button/assets/front/css/style.css?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash9cbe2b45db554ca4cdda2b1945f2de59 5689d6396b22a031ef865fd0de020dbb5ebb9006 738e1a00c7d7a10f1bb5a2bbd89df73af4bdfbecf2d9ade3e2e261cc5bdf4dda
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-share-button/assets/front/css/style.css?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Wed, 17 Nov 2021 07:40:25 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 212
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/captcha/css/desktop_style.css?ver=4.3.0 | 162.241.194.56 | 200 OK | 417 B |
URL HTTP/2bluehorse.in/wp-content/plugins/captcha/css/desktop_style.css?ver=4.3.0 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash278e60c0dce1b568517d6f208d9ac639 a34c4104b250816bc1004b4c7a9d37423e4ffeab f07e96a87e48c3b2c780484176813c6d4b09453891f3045023b79ef287bf803c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/captcha/css/desktop_style.css?ver=4.3.0 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Sat, 12 Aug 2017 12:01:53 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 417
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/captcha/css/front_end_style.css?ver=4.3.0 | 162.241.194.56 | 200 OK | 719 B |
URL HTTP/2bluehorse.in/wp-content/plugins/captcha/css/front_end_style.css?ver=4.3.0 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash5094b8d355df635a35737e226677d3e8 f768666de7031ed908655bd6aeef7f4b90001b44 d554eef5d4e2aae3026e360ed8826031812c9ebf02d9ba40c721476cd3d5cfde
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/captcha/css/front_end_style.css?ver=4.3.0 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Sat, 12 Aug 2017 12:01:53 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 719
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/pythne.css | 162.241.194.56 | 200 OK | 2.0 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/pythne.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashf25612e26636c5339112af85e1d734b6 74268386e370c1a1f873bd62fda917e16b55b94b 61e9db08cb0701c82e1f60ae0cd78cea25a78d15b16a7038c94b9583c810289c
GET /wp-content/themes/bluehorse/css/pythne.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Mon, 17 May 2021 13:10:14 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 1995
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-includes/css/dist/block-library/style.min.css?ver=5.8 | 162.241.194.56 | 200 OK | 15 kB |
URL HTTP/2bluehorse.in/wp-includes/css/dist/block-library/style.min.css?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (33376) Hash6ebc7a4d773cb1f29a93f605933fba76 b113ca39afc5fd44cbc06dca58945bb5e9fb771e 7a12133f8cb48c1b5b4631ee9e9a0eebe36bbf2bbe1eb792b0f9fc630c18bd76
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Sep 2021 12:00:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14560
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/scripts/function.js | 162.241.194.56 | 200 OK | 225 B |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/scripts/function.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hasha72c5381abee076e87976390d5c90e19 06714120c3d8e30423bf3a415b1c4c4e6ca93504 3b95957754274377955825615f72772d81c2ee50a6162d4bd415ef11c0c62d18
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/scripts/function.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 14:26:16 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 225
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8 | 162.241.194.56 | 200 OK | 3.4 kB |
URL HTTP/2bluehorse.in/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (14965), with no line terminators Hash8be7a878c560f1b146db163966f64d74 0dfdd50b2c3355c62cd7426649e819ba4a652495 7c7f8eb143a56619e051b210fa355e14ff4ff9f8fad982b0c4110c166a2aadca
GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 01 Sep 2022 10:29:25 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 3356
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Exo:200,300,400 | 142.250.74.10 | 200 OK | 922 B |
URL HTTP/2fonts.googleapis.com/css?family=Exo:200,300,400 IP142.250.74.10:0
Hash08d74108c0107c7dfcda9871e0872e89 c9cb4a3781c5b6bb6b62cb51c1d5fd0b3bb728b2 05b73979cf89b80766c0c0813e792e28da206f3c35ddca47c6bd99d42d46ed11
GET /css?family=Exo:200,300,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Sep 2022 23:13:32 GMT
date: Sat, 03 Sep 2022 23:13:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb15f3f14bd92b7a544ec2347e6810c7b dd55fd8396d796082edabb5ab6e2d7fb3b51b731 87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7264
Expires: Sun, 04 Sep 2022 01:14:36 GMT
Date: Sat, 03 Sep 2022 23:13:32 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb15f3f14bd92b7a544ec2347e6810c7b dd55fd8396d796082edabb5ab6e2d7fb3b51b731 87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7264
Expires: Sun, 04 Sep 2022 01:14:36 GMT
Date: Sat, 03 Sep 2022 23:13:32 GMT
Connection: keep-alive
|
|
| bluehorse.in/wp-content/themes/bluehorse/style.css | 162.241.194.56 | 200 OK | 37 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/style.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashcff4e87c1d660f159c17b2eeb18e9503 e296ddbee368cd98888b047f5402b0e7da12dd8f 7c5cb5475e55c51bc1884011b20348dc2765ef7640fdad5ce32c5960a7eafa80
GET /wp-content/themes/bluehorse/style.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 01 Sep 2022 11:41:01 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/css/bootstrap.css | 162.241.194.56 | 200 OK | 30 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/css/bootstrap.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash69ed42164ffdcc39eac4cd958612f559 d4ea4d94520890afba41c6012f7db638b3e9fa8e c18e67a3b2b6ddb14256cd655a1b38b126169b1be8792d0375681dbe4c511421
GET /wp-content/themes/bluehorse/css/bootstrap.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa79c31ef-8277-4472-8ef6-9ea1d733084d.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa79c31ef-8277-4472-8ef6-9ea1d733084d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5958d2ad91c698c62988bdb9256a4543 97f2c77f55f38ff6825fa7fc2ff3198bdef02517 578729554c47a75c74fb3f2d45865592291a35511e0b490b6b8cd4e72e917b73
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa79c31ef-8277-4472-8ef6-9ea1d733084d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8228
x-amzn-requestid: b107192f-7526-4c2e-8978-e4eceb93e09c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wxsE9OIAMFhqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80a-20ca9d565d4a04126e3b41b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:58 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7Lr8qT0rNXnIgRW__zB9HPkSRByNH1uHM19xDns4TLjQrC4N-3-ldA==
via: 1.1 7256fedee68a59a508800e0dda035348.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:00:58 GMT
age: 4354
etag: "97f2c77f55f38ff6825fa7fc2ff3198bdef02517"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6bb4b1d74f1443bc3328301ab3ae6464 2768253dacaaad6cb498c6b2eb7694208b0ce0a6 07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: e408351e-ba6c-4e55-815d-449af808282f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5yMEFBLoAMFtqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313ca4d-13831d8572a3b3cf54a0e747;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:42:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GFM9jerDkTPdhlUTm99E7Lpksw2ZGnV81bNVaZLvWSAiRNDNtkZi4g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
age: 5125
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d74b981-95e8-43cc-a328-b103c45bc3a0.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d74b981-95e8-43cc-a328-b103c45bc3a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0105cc8e96fdfe48f69b36531b2508fd 4767f09893dba15eb6ef40fff85b901a78484289 98e297dabbb6549eb3197eb7cbd6e91993584280b43f85e425d9e9de86e11faf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d74b981-95e8-43cc-a328-b103c45bc3a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7483
x-amzn-requestid: ba1aa566-1b4c-4841-82ab-27613dea9588
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wyAFuRIAMFUMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80c-6a0430f9720a74c160e55d65;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:33:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jCydwNrf0hriKWEExs7HWWI4C9IX52aoG6lEyuUuLBmGThij_f5-nQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:16:11 GMT
age: 3441
etag: "4767f09893dba15eb6ef40fff85b901a78484289"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37a5a560-36c9-4ce4-9cd9-c63ef9dd80e0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37a5a560-36c9-4ce4-9cd9-c63ef9dd80e0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb827f0dcea3d5bfab9139d239e9f0155 ffe21e93486c5763ae6ee17fe39c6dbb0cb3e714 de9a30cf34ccda6ee06845151a41f489b42a0f9072b481b717abef90095e3f35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37a5a560-36c9-4ce4-9cd9-c63ef9dd80e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10349
x-amzn-requestid: a1564fd3-2042-449b-baa8-7e06abf02fd2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5w-6EHXIAMFQaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c85f-26179fef7b74e89f05022fe7;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RTb9HYlXQLizx__DP8Pd9FGTylC1RDwk_YoqL8ZbcFnAAu4s0EmTKQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:10:00 GMT
etag: "ffe21e93486c5763ae6ee17fe39c6dbb0cb3e714"
content-type: image/jpeg
age: 3812
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1814521f-0914-48f7-8ea7-8c2d8155c055.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1814521f-0914-48f7-8ea7-8c2d8155c055.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd8aa56bbbb56df10ff381fc5dd250e09 19288de373e2bc69a51c9e0c6f49f5cf4e0d8759 68c4508940b207a3e1d32a38a9f82b1fbabbb97430fe0a5e2ddc75d62c4bdfcc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1814521f-0914-48f7-8ea7-8c2d8155c055.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10147
x-amzn-requestid: 7c2c3756-fc7b-4386-8c88-f1b42beed37a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxLzHEAHoAMFV8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631059ad-063448962d443e107716b726;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 07:05:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZGR4HPl3KOfSdZzialXKeNrH_DzJzUvyLlwFtx0MQOp0VNsOtdC-bg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 08:04:39 GMT
age: 54533
etag: "19288de373e2bc69a51c9e0c6f49f5cf4e0d8759"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdb23e94d-8ec7-469f-94d2-e08f8feef5d5.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdb23e94d-8ec7-469f-94d2-e08f8feef5d5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe571197d8c99877f806a60c79368d657 3578b5c8eba646e94f574a996703d6b7b4911ab7 290a444ba0f434f25313d9ce96f93bcb749cb5c7d8bad51a63c2775539b594fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdb23e94d-8ec7-469f-94d2-e08f8feef5d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9428
x-amzn-requestid: 050a7e34-6ee3-4562-bd9d-8122b0432cc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjaFXEoAMFjnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7af-4915a10726ffab79380d6a52;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: M_WqsKzaeYjV_bY_1ZYgElrRKbQGetGVvkO8wf1kMXNxPyuFOnmwsA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:17:08 GMT
age: 3384
etag: "3578b5c8eba646e94f574a996703d6b7b4911ab7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=4.1.2 | 162.241.194.56 | 200 OK | 3.7 kB |
URL HTTP/2bluehorse.in/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=4.1.2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (13825), with no line terminators Hash3b79e0259f068c02c8ab9b4cc8aaeefb aed43fdf7cf0c751b256f12278b27c05dcaefffb 6cc234ca840ddfdd50f5e0089d60eb87aec8e4726765a01e5ce15bdf0afccb56
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=4.1.2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 01 Sep 2022 10:29:25 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 3660
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 162.241.194.56 | 200 OK | 6.9 kB |
URL HTTP/2bluehorse.in/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (16323) Hash122fe79a1d53d10946cded540d2e219f 6271fdf889afe8a13d7c69efea9b40cbd0d81939 94cb1b0ca86f7f0bb7bcc81b42a06b6199bd37ff77ca88dccf3acc92683f3e24
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Oct 2021 12:25:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6935
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/js/uisearch.js | 162.241.194.56 | 200 OK | 2.8 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/js/uisearch.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2051) Hash551a47b1ae8211042032b9261640853b dc3ffc72f4a73267015c7d1f6699f273ffe89f78 7fb4432c98985cc75c666d99b22baafa58fdc3a39724c815e45668852a5c8c4e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/js/uisearch.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 16:17:43 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 2824
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/js/bootstrap.min.js | 162.241.194.56 | 200 OK | 10 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/js/bootstrap.min.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (27605) Hashf069663efc06c9b4926fbb7d23231c31 a6bc273d92cdc25669fe1580f87e76eca567ec5d 58a9acb207f89f3c35fff647f515574f42f2473039901bf1cfb09b1a7343fa95
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/js/bootstrap.min.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 16:08:05 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 10521
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-includes/js/wp-embed.min.js?ver=5.8 | 162.241.194.56 | 200 OK | 777 B |
URL HTTP/2bluehorse.in/wp-includes/js/wp-embed.min.js?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1391) Hash06ece4d01ee88297957c9f4cdcaa4df5 2b3321654a8ead1e1493eac9b5f1fdfb65e2037f 0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-embed.min.js?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Oct 2021 11:30:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 777
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 | 162.241.194.56 | 200 OK | 2.6 kB |
URL HTTP/2bluehorse.in/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6406), with no line terminators Hash340db4973d1ee14c5348599f661a3220 d4cf31e2af7774c276d7a883733a8392e232df49 85d0de0d6dbe1f487407829c52413d7e81c7c9ed28bc3ae9079c19303e91f678
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Oct 2021 12:18:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2635
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css?ver=5.8 | 162.241.194.56 | 200 OK | 16 kB |
URL HTTP/2bluehorse.in/wp-content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (65536), with no line terminators Hash0b17ae1c5d77a8b85690e4ed52b223f1 fca4b591de6ff67a9f7dd80dd99e2fc577880550 09429c42a6312f293c18a52770ce4f6b15b0b59001b3dc1dc5d653d5b09c36aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Wed, 17 Nov 2021 07:40:25 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 16209
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 | 162.241.194.56 | 409 Conflict | 83 B |
URL HTTP/2bluehorse.in/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/validator/css/validationEngine.jquery.css | 162.241.194.56 | 200 OK | 866 B |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/validator/css/validationEngine.jquery.css IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hashef732c0f91935ebe4ca8182337828ac6 d5edc4a076036986ff41254e247595544401503c 54bc26fdf63c2848f5c37b646ba9b97da168cf446d3d615178a87135f3d24544
GET /wp-content/themes/bluehorse/validator/css/validationEngine.jquery.css HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Fri, 23 Dec 2016 10:13:42 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 866
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/validator/js/languages/jquery.validationEngine-en.js | 162.241.194.56 | 200 OK | 2.6 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/validator/js/languages/jquery.validationEngine-en.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1219), with CRLF line terminators Hashda01e8eedb7823d35da5e8bca7973b90 f47337f922ab89dcc75facffe9d7e4b2a86beb7d 5646ea68c76f1459d53308f439e88d43e50f3748435e47d2fc60746104283b86
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/validator/js/languages/jquery.validationEngine-en.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 14:29:45 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 2609
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2016/11/logo.png | 162.241.194.56 | 200 OK | 10 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2016/11/logo.png IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 138 x 89, 8-bit/color RGBA, non-interlaced\012- data Hash1b852677ada3e2b417e302f532ce0779 bb9402697eee1a512a95c07d83c192194f0d9d2b 3d0e0abaa5089893c5f43f9980c1fe8a190b7a45ff4228076cf170fe48445422
GET /wp-content/uploads/2016/11/logo.png HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 23 Dec 2016 10:13:32 GMT
accept-ranges: bytes
content-length: 9982
content-type: image/png
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/ | 162.241.194.56 | 200 OK | 33 kB |
URL HTTP/2bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/ IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash0303422b2948569221dcce2202298db5 ce04d8194dc74dbb5b78c26a2acf479f065feae1 f71dc68b00013b789f3d29247f999d76bebe408fcf70881ff6492f5bd9058c87
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /blog/securing-wordpress-website-ultimate-guide-2021/ HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
link: <https://bluehorse.in/wp-json/>; rel="https://api.w.org/", <https://bluehorse.in/?p=2729>; rel=shortlink
set-cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251; expires=Sat, 03-Sep-2022 23:43:31 GMT; Max-Age=1800; path=/
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 03 Sep 2022 23:13:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2016/11/mob-logo.png | 162.241.194.56 | 200 OK | 12 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2016/11/mob-logo.png IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 138 x 89, 8-bit/color RGBA, non-interlaced\012- data Hashc0e7897602b93cfb9530130c7ec64f9a f4c7c30ff052aa262d57f1d40f2bde837026cc2e 960fa5a945c868337149a6b028b19ed42a55ae3b60bd5db1379ba1579919efd1
GET /wp-content/uploads/2016/11/mob-logo.png HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 23 Dec 2016 10:13:32 GMT
accept-ranges: bytes
content-length: 11464
content-type: image/png
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.2 | 162.241.194.56 | 409 Conflict | 83 B |
URL HTTP/2bluehorse.in/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/02.jpg | 162.241.194.56 | 200 OK | 36 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/02.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:09:03 17:43:41], progressive, precision 8, 750x320, components 3\012- data Hash96a6e3f5ae0e0a21e83358cec23ca6e8 f464add2c5fd31f2b3f29d0eb78cb7a049f1ec0e cf4ee3cb81df8fca4585a919a472db00dfbd6d8d377908a8b441114e1187f43b
GET /wp-content/uploads/2021/09/02.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:07:49 GMT
accept-ranges: bytes
content-length: 35696
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/08.jpg | 162.241.194.56 | 200 OK | 46 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/08.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:09:03 17:42:35], progressive, precision 8, 750x320, components 3\012- data Hash9a9665f80419be8abbe421ddc14f14ec d419711743b46e8af1f2b9f3806aa34e141cabeb 27ac5a3e0eec43435424249374f135410e160cc59970c2b9f2e046bc60b0fa1a
GET /wp-content/uploads/2021/09/08.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:10:52 GMT
accept-ranges: bytes
content-length: 45501
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/05.jpg | 162.241.194.56 | 200 OK | 46 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/05.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:09:03 17:43:09], progressive, precision 8, 750x320, components 3\012- data Hash1b2e5e6727cc19cfeca7936c80724091 02e21bbab6495e2b5969499056942d436fd2353c 758f9009fd8d33f871eb9a48de8bb831801cd9ad02aee218d89c4f0fadd7e57c
GET /wp-content/uploads/2021/09/05.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:21:10 GMT
accept-ranges: bytes
content-length: 45889
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/06.jpg | 162.241.194.56 | 200 OK | 55 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/06.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:09:03 17:42:56], progressive, precision 8, 750x320, components 3\012- data Hash25e1f9d717a73831d1a88f731bb3dd03 0219f19c0cddbb9fe85879f360da1e13f1738e0f 112e6ac387331509acd1099244e5d5bd0dc14c7a7bdac4c5da0b90b8f6bb5085
GET /wp-content/uploads/2021/09/06.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:18:35 GMT
accept-ranges: bytes
content-length: 54799
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/03.jpg | 162.241.194.56 | 200 OK | 61 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/03.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:09:03 17:43:32], progressive, precision 8, 750x320, components 3\012- data Hashd33ba57a7146149ab64d7e4c1a1b15ec 6dce4cfa3b9b23dc2878e1ad2321949a173f7d16 98dcc391ec711f7583ce1630dd4eaa6f561ac1c53cdc7daee81850ee5f669290
GET /wp-content/uploads/2021/09/03.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:17:54 GMT
accept-ranges: bytes
content-length: 61316
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/04.jpg | 162.241.194.56 | 200 OK | 62 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/04.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:09:03 17:43:21], progressive, precision 8, 750x320, components 3\012- data Hash7a569f42839f76264e94c31b8250bac8 7a513a96502525b056b5343a4bed520c45e3d875 a067a07f6fffc7147b096909ae001cf4896271ad5d98895f92805c7c133f3821
GET /wp-content/uploads/2021/09/04.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:20:36 GMT
accept-ranges: bytes
content-length: 62206
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash98125354dbaa891018a9429a7aae3ea1 a692cc9a073c9666971db41444342fc9d7dab2e2 771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bluehorse.in/wp-content/themes/bluehorse/js/jquery-ui.js | 162.241.194.56 | 200 OK | 161 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/js/jquery-ui.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
Size161 kB (161439 bytes) Hash2c3a822b540f773938eba8ddadb7f91f bbbbaf6f21ffc4d76bdb1d6fdff26501b71a7f65 c70b6a71a3aee12c27e01560392cbb8099a5c97d7d27c9cedb41d1e52f01e3a4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/js/jquery-ui.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 16:12:42 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash98125354dbaa891018a9429a7aae3ea1 a692cc9a073c9666971db41444342fc9d7dab2e2 771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash98125354dbaa891018a9429a7aae3ea1 a692cc9a073c9666971db41444342fc9d7dab2e2 771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/exo/v20/4UaOrEtFpBISc36j.woff2 | 142.250.74.163 | 200 OK | 20 kB |
URL HTTP/2fonts.gstatic.com/s/exo/v20/4UaOrEtFpBISc36j.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 20364, version 1.0\012- data Hash0de6b557071176e7a82239a7ee11306b b85c796676d5d08baa1bcc0957a80b5e3a3ddf47 3e9d07ebb7ea3f8e5c5568fa3b4e81d5b93aacfd93cc05192a30c0438039d349
GET /s/exo/v20/4UaOrEtFpBISc36j.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20364
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 03:16:45 GMT
expires: Tue, 29 Aug 2023 03:16:45 GMT
cache-control: public, max-age=31536000
age: 503808
last-modified: Mon, 11 Jul 2022 19:24:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.163 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 18:53:20 GMT
expires: Tue, 29 Aug 2023 18:53:20 GMT
cache-control: public, max-age=31536000
age: 447613
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 | 162.241.194.56 | 409 Conflict | 83 B |
URL HTTP/2bluehorse.in/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 03 Sep 2022 23:13:33 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-includes/js/wp-emoji-release.min.js?ver=5.8 | 162.241.194.56 | 200 OK | 5.2 kB |
URL HTTP/2bluehorse.in/wp-includes/js/wp-emoji-release.min.js?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15224) Hash00af0ddf324f69fcb25f0d2e5d08910a df0379ab0e1b2902957c8aba77f89d88e1239b59 f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Oct 2021 11:27:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5243
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash98125354dbaa891018a9429a7aae3ea1 a692cc9a073c9666971db41444342fc9d7dab2e2 771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 23:13:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/07.jpg | 162.241.194.56 | 200 OK | 10 kB |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/07.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 228x387, components 3\012- data Hash76bae18b547961cac7f73810f8245128 a2a33dd28667e19f56ff118a7b701740c27f9c40 697c2da8d935195a1e069a639ef271eca3cb99db4dbf21c20645e9520b37172a
GET /wp-content/uploads/2021/09/07.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:19:34 GMT
accept-ranges: bytes
content-length: 39152
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/social-share-button/assets/global/webfonts/fa-solid-900.woff2 | 162.241.194.56 | 200 OK | 74 kB |
URL HTTP/2bluehorse.in/wp-content/plugins/social-share-button/assets/global/webfonts/fa-solid-900.woff2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 74348, version 329.31064\012- data Hash462806316fea535a6a57651bc2b000b0 80644191098f863f25be27841c0d92c452cf2327 4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-share-button/assets/global/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bluehorse.in/wp-content/plugins/social-share-button/assets/global/css/fontawesome-5.min.css?ver=5.8
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Wed, 17 Nov 2021 07:40:25 GMT
accept-ranges: bytes
content-length: 74348
content-type: font/woff2
date: Sat, 03 Sep 2022 23:13:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.2 | 162.241.194.56 | 409 Conflict | 83 B |
URL HTTP/2bluehorse.in/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 03 Sep 2022 23:13:33 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js | 142.250.74.163 | 200 OK | 158 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js IP142.250.74.163:0
File typeHTML document, ASCII text, with very long lines (579) Size158 kB (158056 bytes) Hashd63a69f898e1d00cfc7c871744ded8c4 e166540eccb571c95c8c1135c2168cf5df306991 ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 92539
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ssl.google-analytics.com/ga.js | 142.250.74.40 | 200 OK | 17 kB |
URL HTTP/2ssl.google-analytics.com/ga.js IP142.250.74.40:0
File typeASCII text, with very long lines (1305) Hash01d5892e6e243b52998310c2925b9f3a 58180151b6a6ee4af73583a214b68efb9e8844d4 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Sat, 03 Sep 2022 22:29:20 GMT
expires: Sun, 04 Sep 2022 00:29:20 GMT
cache-control: public, max-age=7200
age: 2653
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/images/favicon.ico | 162.241.194.56 | 200 OK | 1.2 kB |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/images/favicon.ico IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Hashea4f054bb200c08453a95d3575eafef1 23aab635a9ab45ba6af76e1a094fb5e00ab86a3c 8ced486577727f067ab5fcdebe1abfc0c2d83d057f84f30b5c2bbf69dabc7c66
GET /wp-content/themes/bluehorse/images/favicon.ico HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251; _ga_4K9TRK6PV6=GS1.1.1662246810.1.0.1662246810.0.0.0; _ga=GA1.1.1587403100.1662246811
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 23 Dec 2016 10:13:42 GMT
accept-ranges: bytes
content-length: 1150
cache-control: max-age=604800
expires: Sat, 10 Sep 2022 23:13:33 GMT
content-type: image/x-icon
date: Sat, 03 Sep 2022 23:13:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| static.zdassets.com/ekr/asset_composer.js | 104.18.70.113 | 200 OK | 6.2 kB |
URL HTTP/2static.zdassets.com/ekr/asset_composer.js IP104.18.70.113:0
File typeASCII text, with very long lines (23416), with no line terminators Hash5c8dfa4b03c249280dc5499163c0ecd5 8175856cc8ef13616e2925e7300053d99c90f581 dc34c2a0a3c03f5010ee70b1385f78ef19bfe96cd37c2591b4b7b22a03b1f044
GET /ekr/asset_composer.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluehorse.in/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:33 GMT
content-type: application/javascript
x-amz-id-2: dUZfshkH6s6HIQA7+U0tDhX+A5i1VSOF0AP1wrYwttudGl3FDx99SpKMnalxiwyFmxN4PZcqRnA=
x-amz-request-id: Y9E1NT7ZVNF7R3ZX
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: 57KHzv0Z81imwMa0XxScJAmcLiHhq1Ku
cf-cache-status: HIT
age: 10
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r9Yh8xfiNPJ0X%2Bak%2B60jWcWV2EU7EEuaGXTiao3BaV6K6o6XKtZwoyhdsH6Cpj1fw1Mm7bQP9x%2BaSGnndOSEFy%2BdR6%2Fr1mmCJ3gUOcWgDZ1z5tkqFjAH6YphBu7s9AdhnP608Is%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74522d3abcc1fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/styles__ltr.css | 142.250.74.163 | 200 OK | 24 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/styles__ltr.css IP142.250.74.163:0
File typeASCII text, with very long lines (52762), with no line terminators Hashf2d649025c814be9c33f166a5e04fe88 26bf59de631415927ba2c6c9e44fe9c763f95313 f95ec963b7657097e1ef827fc07d96eda5b63f7d3e17b5a1b5eeb7a8d0b67921
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24251
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:35:23 GMT
expires: Sat, 02 Sep 2023 21:35:23 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/css
age: 92291
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js | 142.250.74.163 | 200 OK | 158 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js IP142.250.74.163:0
File typeHTML document, ASCII text, with very long lines (579) Size158 kB (158056 bytes) Hashd63a69f898e1d00cfc7c871744ded8c4 e166540eccb571c95c8c1135c2168cf5df306991 ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 92540
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-4K9TRK6PV6>m=2oe8v0&_p=2029946210&cid=1587403100.1662246811&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662246810&sct=1&seg=0&dl=https%3A%2F%2Fbluehorse.in%2Fblog%2Fsecuring-wordpress-website-ultimate-guide-2021%2F&dt=Securing%20your%20WordPress%20Website%3A%20An%20Ultimate%20Guide-%202021%20-BlueHorse%20Software&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-4K9TRK6PV6>m=2oe8v0&_p=2029946210&cid=1587403100.1662246811&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662246810&sct=1&seg=0&dl=https%3A%2F%2Fbluehorse.in%2Fblog%2Fsecuring-wordpress-website-ultimate-guide-2021%2F&dt=Securing%20your%20WordPress%20Website%3A%20An%20Ultimate%20Guide-%202021%20-BlueHorse%20Software&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4K9TRK6PV6>m=2oe8v0&_p=2029946210&cid=1587403100.1662246811&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662246810&sct=1&seg=0&dl=https%3A%2F%2Fbluehorse.in%2Fblog%2Fsecuring-wordpress-website-ultimate-guide-2021%2F&dt=Securing%20your%20WordPress%20Website%3A%20An%20Ultimate%20Guide-%202021%20-BlueHorse%20Software&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bluehorse.in
date: Sat, 03 Sep 2022 23:13:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ekr.zdassets.com/compose/zopim_chat/7UBsb38hJABHBQHk5lUS1B3dmkswPOZF | 104.18.72.113 | 200 OK | 2.4 kB |
URL HTTP/2ekr.zdassets.com/compose/zopim_chat/7UBsb38hJABHBQHk5lUS1B3dmkswPOZF IP104.18.72.113:0
File typeJSON data\012- , ASCII text, with no line terminators Hashebf93d09c1606f7c84266640068c5529 bf923560e713e15945e4457ca01075a95f35c533 21f678badd4ae8142229f07183cea760def793e812521954c6723cdf77a2cc6e
GET /compose/zopim_chat/7UBsb38hJABHBQHk5lUS1B3dmkswPOZF HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:34 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"0b65b6b26dac21ab4554eadd2bfd4610"
x-request-id: a3992ea7f20184bf98e85d4ef00a6ae0, a3992ea7f20184bf98e85d4ef00a6ae0
x-runtime: 0.005798
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JdQRIguKdHOPv13iiuETWKXg%2Fw9kD3ijhORlIs1%2F2rQTqXHrZMxDs%2BlKtV2DBanvQPinRSI2mG4ifLPHnnKktpsy%2FRUSEvWi25ePrj61ri1s45lFLPlpbVTgcUKQ%2FwL1SjY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74522d3c0be41bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 12:31:58 GMT
expires: Sun, 03 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 38496
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-main.js | 172.67.38.66 | 200 OK | 94 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-main.js IP172.67.38.66:0
File typeASCII text, with no line terminators Hash913b447ec871ab7eec8bec1005ff8e77 f95d547853ca5c389299636dfc202157042bb4c5 49aee71bb91db74830cb43c94ad5aeaf0d1e4e82de7006266707bca0ef046155
GET /_s/v4/app/630c16bea60/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:34 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d3f7c9fb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.165 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.165:0
Hashfe25316296080188eac16533f70e544e 13745e74eaa593579c10ad3951dc7ed2e0c522f6 5d01f160b3851f3142ed803aadc1df13c4a06f0cd139a470840d339b86d1ee2c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 23:13:35 GMT
Last-Modified: Sat, 03 Sep 2022 21:53:28 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U6xxMJyCErL19Pee0D_Rfxyb8LSlzZyPuGuuMuffiFUOwMrOulhUVg==
Age: 4808
|
|
| widget-mediator.zopim.com/s/W/ws/jGghTFb7X1ie67NB/c/1662246812557 |  52.28.92.222 | 101 Switching Protocols | 0 B |
URL HTTP/1.1widget-mediator.zopim.com/s/W/ws/jGghTFb7X1ie67NB/c/1662246812557 IP52.28.92.222:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/jGghTFb7X1ie67NB/c/1662246812557 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://bluehorse.in
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SxBGGjpH1a5MB5fPmw+oQg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 03 Sep 2022 23:13:35 GMT
Connection: upgrade
Set-Cookie: AWSALB=lWKZJAUGcd9ongVEkZesjZsOT6ATSCxtUx3LzJouXFwrEUo2c4AROvkkiBHwuukQgiXzFSPOWs72CaCtFQni/jrDxcarsUHbP6GuRkJsnqc1dg3rl7ePNVcG2AC5; Expires=Sat, 10 Sep 2022 23:13:35 GMT; Path=/
AWSALBCORS=lWKZJAUGcd9ongVEkZesjZsOT6ATSCxtUx3LzJouXFwrEUo2c4AROvkkiBHwuukQgiXzFSPOWs72CaCtFQni/jrDxcarsUHbP6GuRkJsnqc1dg3rl7ePNVcG2AC5; Expires=Sat, 10 Sep 2022 23:13:35 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: QX2VNO3FYqTZFRsFl9WDe9PxX+g=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
|
|
| embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg | 172.67.38.66 | 200 OK | 60 kB |
URL HTTP/2embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg IP172.67.38.66:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (22356), with no line terminators Hash7122dc1fc3b71d9f193bf32731f8c0bf 28ef5a53addfb2ed7e787498fad672ceae334aa6 b3034312c9f4ad1e0776272f930f77a19c8539fd881f27ab8ff41d8054af2a55
GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: image/svg+xml
last-modified: Sat, 22 May 2021 07:25:19 GMT
etag: W/"f66e029841759471d2ec78b86760dca7"
age: 1229778
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d47cb51b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 | 104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hash3e67acd981a431f0e96c8279365c652e 090296d55bf287d0a8abb716dd81c3244a911713 7e823dbe3f9825b4d540066b7fbbb6535d67a08350eff36b75e2031b0e487524
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 23:13:36 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "2654A1C869FB0F532010F7E605B1BF015EF81867"
Expires: Sun, 04 Sep 2022 10:00:00 GMT
Last-Modified: Sat, 03 Sep 2022 22:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 274
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74522d48797a0b61-OSL
|
|
| v2.zopim.com/bin/v/widget_v2.334.js | 104.16.107.139 | 200 OK | 262 kB |
URL HTTP/2v2.zopim.com/bin/v/widget_v2.334.js IP104.16.107.139:0
Size262 kB (261527 bytes) Hash9faa479b60491cc71c0781d6f63e2d63 e6dd7e394b3523e68f6c24390b3aca1da9e9b102 c57e6e58b70c598a0e4b4a7e4313b31af14740d1ee4918a8177f8263f918ef7d
GET /bin/v/widget_v2.334.js HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluehorse.in/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 27 Jul 2022 03:35:19 GMT
vary: Accept-Encoding
etag: W/"62e0b277-10301f"
expires: Tue, 31 Aug 2032 23:13:35 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 248298
server: cloudflare
cf-ray: 74522d425adcb51d-OSL
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;700&display=swap | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;700&display=swap IP142.250.74.10:0
GET /css2?family=Poppins:wght@200;300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Sep 2022 23:13:32 GMT
date: Sat, 03 Sep 2022 23:13:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-f1596d96.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-f1596d96.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-chunk-f1596d96.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"e6c3687b9d8077b1c5609742d54f63c8"
age: 510039
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d46ea93b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.bluehorse.in/wp-content/uploads/2021/09/01.-Cover.jpg | 162.241.194.56 | 200 OK | 0 B |
URL HTTP/2www.bluehorse.in/wp-content/uploads/2021/09/01.-Cover.jpg IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2021/09/01.-Cover.jpg HTTP/1.1
Host: www.bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
vary: Referer
last-modified: Fri, 03 Sep 2021 13:02:54 GMT
accept-ranges: bytes
content-length: 41915
content-type: image/jpeg
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/css/max-widget.css | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/css/max-widget.css IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/css/max-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=75568
access-control-allow-origin: *
etag: W/"d5a426073b355cf87afd282a1bc5b39e"
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 510045
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d478b1db50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/js/jquery-1.11.1.min.js | 162.241.194.56 | 200 OK | 0 B |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/js/jquery-1.11.1.min.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/js/jquery-1.11.1.min.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 16:11:27 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-app.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-app.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:34 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d3f8caeb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=4.1.2 | 162.241.194.56 | 200 OK | 0 B |
URL HTTP/2bluehorse.in/wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=4.1.2 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=4.1.2 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 01 Sep 2022 10:29:25 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-f163fcd0.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-f163fcd0.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-chunk-f163fcd0.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"a92075fd9ac5ba130387a80453676099"
age: 510046
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d46faabb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-32507910.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-32507910.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-chunk-32507910.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"06e2686edf8c9d8f044eaa817aab00b8"
age: 510046
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d46fab2b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-includes/css/dashicons.min.css?ver=5.8 | 162.241.194.56 | 200 OK | 0 B |
URL HTTP/2bluehorse.in/wp-includes/css/dashicons.min.css?ver=5.8 IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dashicons.min.css?ver=5.8 HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Sep 2021 12:00:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| bluehorse.in/wp-content/themes/bluehorse/validator/js/jquery.validationEngine.js | 162.241.194.56 | 200 OK | 0 B |
URL HTTP/2bluehorse.in/wp-content/themes/bluehorse/validator/js/jquery.validationEngine.js IP162.241.194.56:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bluehorse/validator/js/jquery.validationEngine.js HTTP/1.1
Host: bluehorse.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/blog/securing-wordpress-website-ultimate-guide-2021/
Cookie: ppwp_wp_session=f7f92e1c74291f93b309f629a5b38890%7C%7C1662248611%7C%7C1662248251
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Referer,Accept-Encoding
last-modified: Thu, 28 Oct 2021 14:29:21 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript
date: Sat, 03 Sep 2022 23:13:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-common.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-common.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"a60e52c6e06e37e6cb034be34513f89a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d3f8ca7b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:400,600,700 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans:400,600,700 IP142.250.74.10:0
GET /css?family=Open+Sans:400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Sep 2022 23:13:32 GMT
date: Sat, 03 Sep 2022 23:13:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/css/bubble-widget.css | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/css/bubble-widget.css IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/css/bubble-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=13594
access-control-allow-origin: *
etag: W/"ce7913b80c763449b3895d46419f7a6b"
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 510038
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d478b14b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/63089be037898912e9654fe9/1gbcq1pja | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/63089be037898912e9654fe9/1gbcq1pja IP172.67.38.66:0
GET /63089be037898912e9654fe9/1gbcq1pja HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:34 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-630c16bea60"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d385e38b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-vendor.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-vendor.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:34 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d3f8ca4b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-vendors.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-vendors.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bluehorse.in
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"81c2642aac0b88b6b237d279f5f8ce67"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d3f8ca5b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-2d0b9454.js | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/js/twk-chunk-2d0b9454.js IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bluehorse.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: application/javascript
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
etag: W/"09c3819d373bd4178a620d721429fada"
age: 510046
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d46faa2b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/630c16bea60/css/min-widget.css | 172.67.38.66 | 200 OK | 0 B |
URL HTTP/2embed.tawk.to/_s/v4/app/630c16bea60/css/min-widget.css IP172.67.38.66:0
GET /_s/v4/app/630c16bea60/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 23:13:35 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24916
access-control-allow-origin: *
age: 510046
etag: W/"0099320c1e175d5dc7133b15f2ccf4f0"
last-modified: Mon, 29 Aug 2022 01:31:16 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74522d478b11b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|