dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
70.39.251.193301 Moved Permanently 300 B URL HTTP/1.1 dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
IP 70.39.251.193:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 371cec0a02e7dd161120b5f6c54194f5
d6d6609b7fa26f47ef38997c77605ff537b7c40d
91181aebabd2409f5be8eb45008e6d2f0a6899e6e057d86895ab2ec3bd0bd53a
Analyzer Verdict Alert fortinet Phishing
GET /uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Sep 2022 06:09:08 GMT
Server: Apache
Location: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Content-Length: 300
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3293
Expires: Wed, 28 Sep 2022 07:04:01 GMT
Date: Wed, 28 Sep 2022 06:09:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 05:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NiuMmn3d90KPPJnDpzAKDPYQMUsrVMGc5qeW-YJptdT3hmdd27wd4A==
Age: 3209
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DEpQb5FvglKfxaWzzLqrgPU5bsljDAIj_HxOxqzO9U52v8aLDn_n_A==
age: 74695
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 06:09:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 28 Sep 2022 05:29:33 GMT
Expires: Wed, 28 Sep 2022 06:16:31 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Mf5GGnMepOURRIG-Ggggr8KXqd7C6ZNDa_qfpIMA8aqguv-vN1FAbg==
Age: 2376
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1883
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:09 GMT
Last-Modified: Wed, 28 Sep 2022 05:37:46 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.89.17.198101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.17.198:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1Zdm7T0yI5waENakPkDnVg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tRrVQmqOgif+4tLMqRiV+cRZ6vw=
dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
70.39.251.193404 Not Found 30 kB URL HTTP/1.1 dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
IP 70.39.251.193:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1782), with CRLF, LF line terminators
Hash aab5df9f41898cb6507f57cd8a2ad277
f657435b2bcc1df93ead75574719f3c6dec2681e
aebc44701ab7123b59f278952b0aeaef17a0288e4bb26eedf04e8c8739d98153
Analyzer Verdict Alert fortinet Phishing
GET /uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 06:09:09 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dbluemarketing.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/wp-includes/css/dist/block-library/style.min.css?ver=5.0.17
70.39.251.193200 OK 26 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/css/dist/block-library/style.min.css?ver=5.0.17
IP 70.39.251.193:0
File type ASCII text, with very long lines (25658), with no line terminators
Hash eb1a96949e0ea0d08033d3f941bf1f3e
8e8e16cd9105066fe8dc4f80ace8010d060f08f4
1698abe528bb1f8e76991814a09aacb0ec7247d421ed2e4ff8f00e3fb1275712
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:39 GMT
Accept-Ranges: bytes
Content-Length: 25658
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WHW8R5K
142.250.74.72200 OK 56 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WHW8R5K
IP 142.250.74.72:0
File type ASCII text, with very long lines (2039)
Hash 6129415245a624445c3e8f9e2c376f78
732236fffbcdf6e5b0277252fb32dd6ad656474c
6ea95012b1f7b0c89e18b7956dceb68c63fd27ed7141c4a4dcc5a4607bb6cbeb
GET /gtm.js?id=GTM-WHW8R5K HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 28 Sep 2022 06:09:10 GMT
expires: Wed, 28 Sep 2022 06:09:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55846
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
70.39.251.193200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
IP 70.39.251.193:0
Hash 0fe667f25cacd7a22fe7422c1f594a7d
1a0eb97c9e63bf0aa84f5316dcc4e11994bd6be2
9962e7ec063ae1b4f87238d2bf75543184cb82948b3cfa0aa5dca7de188545e5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:33:59 GMT
Accept-Ranges: bytes
Content-Length: 10101
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15
70.39.251.193200 OK 8.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15
IP 70.39.251.193:0
File type ASCII text, with very long lines (776)
Hash 2837f27759ecfaf6107fc9bff9ad4623
5a875fc10f5c7e91772ba5a52d627da1572d294c
e41aa4bbd652e8426528cd8f98c531fa4bafd3ad65cbeaeea7c931ca8aa105fe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/sumoselect.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:29 GMT
Accept-Ranges: bytes
Content-Length: 8362
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15
70.39.251.193200 OK 4.5 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15
IP 70.39.251.193:0
Hash 56b98e1ea752f518c2d4dc18b47c79e0
d7b8d81523ddb5232b3051e850e71f3ba0e521e8
6baa10abfc0f43f7b087e4e07dd46fc63911a19744799a5c79acba4c13175fd9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/bwg_frontend.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:28 GMT
Accept-Ranges: bytes
Content-Length: 4514
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
70.39.251.193200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 70.39.251.193:0
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 17:54:12 GMT
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15
70.39.251.193200 OK 6.2 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15
IP 70.39.251.193:0
Hash b7f7a59349cf1d6d37822acd901b897f
e5bc14bc804e25f35311bbaa04b339ff85fc5634
7a837b776636532b1285a0538cc6819203d005abe0ebc552dd349ebeec51dfe3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:45 GMT
Accept-Ranges: bytes
Content-Length: 6183
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15
70.39.251.193200 OK 13 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15
IP 70.39.251.193:0
Hash 134d36ccd55a3865fccee8ffa9840c2f
cc10fbd8363394dae26d6a954f27d2b7cf8e5a14
bbf8b025f38fc6aef74423424106cc06be1b91e2c794cff8d9bf1e5b9a3ddfbb
GET /wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.css?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:29 GMT
Accept-Ranges: bytes
Content-Length: 13224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
70.39.251.193200 OK 28 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0
IP 70.39.251.193:0
Hash 9609f7e7d295c7228a85b050d947c822
02ebd37aaf99e4bd3b01c7a76c3300ef94c34cb4
88919c061becf91230051c714af2770d3d496c0ad35ac6081e7bd778ac3d22f6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/font-awesome/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 19:06:52 GMT
Accept-Ranges: bytes
Content-Length: 27506
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
70.39.251.193200 OK 97 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP 70.39.251.193:0
File type ASCII text, with very long lines (31997)
Hash dc5ba5044fccc0297be7b262ce669a7c
f137ff98ae379e35b0702967d3b6866a0a40e3be
cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 17:54:14 GMT
Accept-Ranges: bytes
Content-Length: 96874
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15
70.39.251.193200 OK 10 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15
IP 70.39.251.193:0
File type ASCII text, with very long lines (10126)
Hash b34754baa665255accae552a1da39ef0
c1b6e804a7ca05f09a3f80ec7c5d926966063dbe
9c12c1ab49081580907c9927752e7b7bb510a148710be87c03b6fb7d79632c32
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 10215
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15
70.39.251.193200 OK 6.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15
IP 70.39.251.193:0
File type ASCII text, with very long lines (6322)
Hash 63d1efa154bd0728b1dcb3c4abee929d
b29b779e8b5fc5809e25343858a7d73ee4c93a02
d50e992ac846d1a23ac3fde9ddc997a572fc65702611c667b0a758cf8ee99083
GET /wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 6418
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15
70.39.251.193200 OK 25 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15
IP 70.39.251.193:0
File type ASCII text, with very long lines (24110)
Hash c0efc8c25969b270348069a176e93f8c
39680ef85bdbec350f35e41de4bfca303f5dc34f
db06dcfa0112b05cef7abd20fadc5baf632a316515f07cfd4fceb436c8a0cb1b
GET /wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 25168
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
70.39.251.193200 OK 7.6 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
IP 70.39.251.193:0
Hash a20ccc97b8ab6324adeb56fa34a04c55
bd9ceb6f34eac052e13bb21f76ce83f7334841d2
19e3bcd44b9c726bc12f4138ee4dece9f85487a7b54ea467f6444e323de2207f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:47 GMT
Accept-Ranges: bytes
Content-Length: 7583
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15
70.39.251.193200 OK 7.4 kB URL HTTP/1.1 dbluemarketing.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15
IP 70.39.251.193:0
Hash ac64ec723cd0e47a8885ec1de47b69ed
20153b749d38915c7546bdc743d0e669bac051ab
3aa74777e9e4c823d67f704e4e35d820ad70b8363c403580d8e8bf7a9d2449c8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.5.15 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:31:46 GMT
Accept-Ranges: bytes
Content-Length: 7381
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/wp-emoji-release.min.js?ver=5.0.17
70.39.251.193200 OK 12 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/wp-emoji-release.min.js?ver=5.0.17
IP 70.39.251.193:0
File type ASCII text, with very long lines (9063)
Hash fe0575b66568074463f12485d90f6d4c
aeedd9ab3b7874e63f647042963cb1301a38b391
647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 06:07:30 GMT
Accept-Ranges: bytes
Content-Length: 11943
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
70.39.251.193200 OK 122 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
IP 70.39.251.193:0
File type ASCII text, with very long lines (65371)
Size 122 kB (122540 bytes)
Hash 5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87
GET /wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:00 GMT
Accept-Ranges: bytes
Content-Length: 122540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dbluemarketing.com/wp-content/themes/BlueMDeep/js/temp.js?ver=1.0
70.39.251.193200 OK 879 B URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/js/temp.js?ver=1.0
IP 70.39.251.193:0
Hash c4f5e8e61f2949f5f57c5c9895baee4c
061ef5019c9d9c61c1e0947ef22ae788f813bc1b
2016efd04ddb0018166d9c648e6e86e63c04c78eb37dcd3b23543111a8ec05ad
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/js/temp.js?ver=1.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:09 GMT
Accept-Ranges: bytes
Content-Length: 879
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-includes/js/wp-embed.min.js?ver=5.0.17
70.39.251.193200 OK 1.4 kB URL HTTP/1.1 dbluemarketing.com/wp-includes/js/wp-embed.min.js?ver=5.0.17
IP 70.39.251.193:0
File type ASCII text, with very long lines (1391), with no line terminators
Hash 570ae0f3c201604926ea599d3d1f6c04
2c29243a73660964d4712b969d2a15e27777bc14
5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-embed.min.js?ver=5.0.17 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 06:07:30 GMT
Accept-Ranges: bytes
Content-Length: 1391
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0
70.39.251.193200 OK 37 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0
IP 70.39.251.193:0
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/js/bootstrap.min.js?ver=1.0 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:08 GMT
Accept-Ranges: bytes
Content-Length: 36816
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dbluemarketing.com/wp-content/uploads/2016/01/page-logo.png
70.39.251.193200 OK 32 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/page-logo.png
IP 70.39.251.193:0
File type PNG image data, 279 x 269, 8-bit/color RGBA, non-interlaced\012- data
Hash 1162ec5908b9b4c7872cdb8d5b5dd0b1
09bc27fcf17e28e975f9acb088312224aa363a3a
9ac1d40a9cdb230082d0bce887a0e6b6acc1aa1a5eb9b166b950ceab12e4fdfc
GET /wp-content/uploads/2016/01/page-logo.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:17 GMT
Accept-Ranges: bytes
Content-Length: 31948
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/merlot-logo-300x88.png
70.39.251.193200 OK 19 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/merlot-logo-300x88.png
IP 70.39.251.193:0
File type PNG image data, 300 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d1000e7afbf62d3c7e6451d5340c9dd
46e64ecff1af44bdceab43884f67f02be09c167d
38b1b484af18b163395937f98eaee36ae2bf9e3f2d649af50b086b6c6362d0fb
GET /wp-content/uploads/2016/01/merlot-logo-300x88.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:16 GMT
Accept-Ranges: bytes
Content-Length: 19321
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/goulashlogo-300x87.png
70.39.251.193200 OK 20 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/goulashlogo-300x87.png
IP 70.39.251.193:0
File type PNG image data, 300 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash 303492d2fe5ea3e53fbe626a75868015
cb61a0be7be3cbccf2561caf42faa1dfc05d2c6c
dbbd0ceb34e5215d6d23b80c064c137c2b549b113dab630c8d39b754f44fd223
GET /wp-content/uploads/2016/01/goulashlogo-300x87.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:16 GMT
Accept-Ranges: bytes
Content-Length: 20081
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2016/01/coffeelogo-300x89.png
70.39.251.193200 OK 21 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/01/coffeelogo-300x89.png
IP 70.39.251.193:0
File type PNG image data, 300 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 32727ac4121f5218248de08637c22ad5
e2ba87ad031c37cd916e7986ba7e25d465bce02c
a16ddd8755a2f4e90e61cb09e9fc9280286062a575dba77be4947adc4f461757
GET /wp-content/uploads/2016/01/coffeelogo-300x89.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:15 GMT
Accept-Ranges: bytes
Content-Length: 20786
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2
70.39.251.193200 OK 18 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2
IP 70.39.251.193:0
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dbluemarketing.com/wp-content/themes/BlueMDeep/css/bootstrap.min.css?ver=5.0.17
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:03 GMT
Accept-Ranges: bytes
Content-Length: 18028
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2
dbluemarketing.com/wp-content/uploads/2016/02/1454432292_home.png
70.39.251.193200 OK 466 B URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2016/02/1454432292_home.png
IP 70.39.251.193:0
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash a1b6e9a138ea8e05a5ee3077a1d4789a
389b1079932a10e391b64c3181110f0f2dea3b97
c41894ea5ed0bad49046913b8bde2bc6e33a7c5cdd8ea4ce401ffc6db06c23ef
GET /wp-content/uploads/2016/02/1454432292_home.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:19 GMT
Accept-Ranges: bytes
Content-Length: 466
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2019/06/FBX-Logo.png
70.39.251.193200 OK 72 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/FBX-Logo.png
IP 70.39.251.193:0
File type PNG image data, 977 x 567, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d01115245f370cf79fba51a226b225c
14c8ec8c118df3e06eab3ae711ddb7bb9b5d5818
5c896a78ae531b4c07affe4347dcbc8b293de9b4716d87fb574491286b0716e0
GET /wp-content/uploads/2019/06/FBX-Logo.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:09 GMT
Accept-Ranges: bytes
Content-Length: 72402
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png
70.39.251.193200 OK 22 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png
IP 70.39.251.193:0
File type PNG image data, 270 x 146, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e0ae9ff11312f00c698acaac545f29e
7f510e68d46761e0d8908a184bbada7da236e820
83f5fe833b039f8964223468ed8b85c128e3e55a218ce84af094e587da4086f4
GET /wp-content/uploads/2018/10/cryptofrog-demo-logo-new.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:04 GMT
Accept-Ranges: bytes
Content-Length: 22165
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dbluemarketing.com/wp-content/uploads/2018/02/58v_ewEI.jpg
70.39.251.193200 OK 18 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/02/58v_ewEI.jpg
IP 70.39.251.193:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3\012- data
Hash f4293771945e46eb6f36247afd539995
d159cfc0cfcb15d512438d5431011a79f7f4962c
8ff13d28832dd3e0722ec3f9a41fe1cf7551c6b2fc3459c8f762e3d68534f0c7
GET /wp-content/uploads/2018/02/58v_ewEI.jpg HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:03 GMT
Accept-Ranges: bytes
Content-Length: 18136
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20128
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:09:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20128
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:09:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20128
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:09:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d039db0b842a4cbbaefdaab98bc6722b
78b1a603c4f7f2d6fbad15d7a4cd1397554339e9
65a3c7b0515cfd2a723f3bc3147cb98f3dd75ce1ecfce915c7c8e9ba5ae0bf2d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14018
x-amzn-requestid: fb0f02e7-1ce0-4861-9446-13d60df06f24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xSEhCIAMFWkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-79f482493d204a1208fad00f;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZAov4fpWAjIBhHfeYEwu39wJTG58HnW7ebekpIoNSgA7PLIs5b7sSg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:19 GMT
age: 28792
etag: "78b1a603c4f7f2d6fbad15d7a4cd1397554339e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf
70.39.251.193200 OK 645 kB URL HTTP/1.1 dbluemarketing.com/wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf
IP 70.39.251.193:0
File type TrueType Font data, 16 tables, 1st "GPOS", 34 names, Macintosh, Copyright (c) 2011-2015 by tyPoland Lukasz Dziedzic (http://www.typoland.com/) with Reserved Fon\012- data
Size 645 kB (644556 bytes)
Hash 90e1d3559ac52f7f0f77a86e1bfd632d
a405c8288a8a90881407f93b6ee02b29e26a8735
e9d59afb6d9cb9cf6e8d8159d4639d5b577e29efc64a15182f228659cfc1e818
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/BlueMDeep/fonts/Lato-Light.ttf HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/wp-content/themes/BlueMDeep/css/style.css?ver=1.0.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:10 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:34:05 GMT
Accept-Ranges: bytes
Content-Length: 644556
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: font/ttf
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59163c799f3d48e74abdd285ee615119
883e61d46ef6c09013724aa7b8f560272ee08574
e1bafc575ff4274b210bee481a8e73c065de5bc14ddf46c269ef91eda0df8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8621
x-amzn-requestid: 5a828651-41c2-4aa0-931d-6522098a8438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZASUWEYvIAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ffdb5-5ace75523a98a9237fabca8f;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 07:05:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _r1yeWUGcjSAzmlPcqiZrNgOGrGb29Dxgrz3AOm9oU0-wgHy7axiKw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:40:36 GMT
age: 80915
etag: "883e61d46ef6c09013724aa7b8f560272ee08574"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/uploads/2018/11/FixThat-logo.jpg
70.39.251.193200 OK 14 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2018/11/FixThat-logo.jpg
IP 70.39.251.193:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 492x492, components 3\012- data
Hash 3d36a8d127f0a8c8fe29ea27445f33d3
75daf935b6e2e56e3a98b2c12977e1819e73a114
6171a6bc1c240147c5e9358be717e77490d349e8070f462c0ab6286ff2ba7b9e
GET /wp-content/uploads/2018/11/FixThat-logo.jpg HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:11 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:06 GMT
Accept-Ranges: bytes
Content-Length: 13563
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
dbluemarketing.com/wp-content/uploads/2019/06/MGfav-01.png
70.39.251.193200 OK 13 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/MGfav-01.png
IP 70.39.251.193:0
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash b84990b94151434dfc9de9b2b13009f8
1a3f5d808c7e130608e39b8223c5d9ecebb961dd
d7b0957e169881a97db260b96ea21aa580381e056517ed9194077f7c94cfa060
GET /wp-content/uploads/2019/06/MGfav-01.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:11 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:12 GMT
Accept-Ranges: bytes
Content-Length: 12744
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa5cad224dbddd71881bd07255beb4da
bc214d60be395d4cf753216ff8f9691c33d25e75
82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14464
x-amzn-requestid: 6627e07e-034b-432e-ab9e-afe035fa0b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e9HgIoAMFxUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-7f34c3f6454379724a7ac413;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: J27vcANRhkMUuGwTZjXkO0EF0-UjN-MODVQRKgsc7hJI2S-UPF8Ctw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:53 GMT
age: 30498
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43d7c0db2af42ad4d0095324b2691f6c
1a1139cff14aff6755b9e43ff4ef8c9ece1102c1
42073c84e0c215109b54ab55a53cce9e6cce44f4619f5988fa4e2776ff70b362
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9780
x-amzn-requestid: 9938422e-12cd-4aab-9e58-c26b8fee53b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UOH3DoAMFZRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-37105d923f19437025abec71;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Halsx09hxT_sMRc2jy-fJA0tE85F6Bgz9P9Trx02Z9aMfIZVLkLW4g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:11:14 GMT
age: 28677
etag: "1a1139cff14aff6755b9e43ff4ef8c9ece1102c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 07f06c54e3b1431203308e4134e7efcb
e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49
2814f21c6a21623c189163672867272eb24f754d3d22a8285349e5dd9f6b49f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10031
x-amzn-requestid: 0ac9a228-b6ce-4695-b269-f6a5ba959576
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4HTsoAMF8dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-1d1cacef2608d5820b2bc1b1;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HKSCXbOStqMfD92WWwpkNF1l9euR9RkHTo2boSKqhPAunGl2u_YGlg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:48 GMT
age: 30143
etag: "e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee83d08d024d127fad5918e1ffacb78b
8ad289a77705358ab660b6123e9d90de991b6c13
aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 30502
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dbluemarketing.com/wp-content/uploads/2019/06/lamdafx_png-logo-small.png
70.39.251.193200 OK 259 kB URL HTTP/1.1 dbluemarketing.com/wp-content/uploads/2019/06/lamdafx_png-logo-small.png
IP 70.39.251.193:0
File type PNG image data, 300 x 203, 8-bit/color RGBA, non-interlaced\012- data
Size 259 kB (258807 bytes)
Hash 40eba65d198f0e391d5dc0e0d845c1f3
d61cf55929541de2320f82f90a6c290f87dccbff
66509c884124b5510ca36b1856257c502773986d4c87448c34c176695c9819fe
GET /wp-content/uploads/2019/06/lamdafx_png-logo-small.png HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:11 GMT
Server: Apache
Last-Modified: Sat, 28 Mar 2020 18:35:13 GMT
Accept-Ranges: bytes
Content-Length: 258807
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd9c95c1c24789f4041887b11468ab7e
bf202eeda47e79ac15d77325a02a1206bec63dcb
86f005e634685a4eb89dd87735b4cc0d91163be2912c470a529f0eb223531dbf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5236
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Last-Modified: Wed, 28 Sep 2022 04:41:55 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 28 Sep 2022 04:41:09 GMT
expires: Wed, 28 Sep 2022 06:41:09 GMT
cache-control: public, max-age=7200
age: 5282
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5e01e4cfb215a3f052b4c716bc77c1a6
6e63b3e883051319571310c44b87591f0312d83f
aebb544e0762c6c3eb289d85c20299baa3f742dc46cfa5bcc33ac6df411285ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (1654)
Hash 890f716858b5f72587e47c5eca121cb5
91871a0acd9a0ab644d51036bb5ca0c3bdc5e687
7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 28 Sep 2022 06:09:11 GMT
expires: Wed, 28 Sep 2022 06:09:11 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.200.14200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.200.14:0
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: wkyy6+kTGVKVO3eqL/ra0HGWiNzhH7XiKrmY3BkONurwvv94wievIO3FxB78l448IMucpBoi6rLzl0mV7w1TtA==
content-length: 26840
x-fb-trip-id: 1679558926
date: Wed, 28 Sep 2022 06:09:11 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j97&a=1399748091&t=pageview&_s=1&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=738626997&gjid=1525497839&cid=20971068.1664345349&tid=UA-91767122-5&_gid=996257448.1664345349&_r=1>m=2wg9q0WHW8R5K&z=158145048
142.250.74.174200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=1399748091&t=pageview&_s=1&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=738626997&gjid=1525497839&cid=20971068.1664345349&tid=UA-91767122-5&_gid=996257448.1664345349&_r=1>m=2wg9q0WHW8R5K&z=158145048
IP 142.250.74.174:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j97&a=1399748091&t=pageview&_s=1&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=738626997&gjid=1525497839&cid=20971068.1664345349&tid=UA-91767122-5&_gid=996257448.1664345349&_r=1>m=2wg9q0WHW8R5K&z=158145048 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dbluemarketing.com
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://dbluemarketing.com
date: Wed, 28 Sep 2022 06:09:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd9c95c1c24789f4041887b11468ab7e
bf202eeda47e79ac15d77325a02a1206bec63dcb
86f005e634685a4eb89dd87735b4cc0d91163be2912c470a529f0eb223531dbf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5236
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Last-Modified: Wed, 28 Sep 2022 04:41:55 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dbluemarketing.com/favicon.ico
70.39.251.193200 OK 0 B URL HTTP/1.1 dbluemarketing.com/favicon.ico
IP 70.39.251.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: dbluemarketing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/uadmin/js/ops/rr/a32q0s/post/internet/group/taiwan/sslauthui.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 06:09:11 GMT
Server: Apache
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: image/vnd.microsoft.icon
googleads.g.doubleclick.net/pagead/viewthroughconversion/1002090849/?random=1664345348964&cv=9&fst=1664345348964&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4
172.217.21.162200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1002090849/?random=1664345348964&cv=9&fst=1664345348964&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 172.217.21.162:0
File type ASCII text, with very long lines (2284), with no line terminators
Hash f5d2327b79c8896cf2517ed0340cbee5
2341c5fca129b9db6d3197c4a7c515492161bae4
53f9a996cdbbc22c687870b79d5557871557fc73b63c0a571700b3f11a4f0bbd
GET /pagead/viewthroughconversion/1002090849/?random=1664345348964&cv=9&fst=1664345348964&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 06:09:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1044
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Sep-2022 06:24:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1002090849/?random=1664345348964&cv=9&fst=1664344800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=3607335739&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1002090849/?random=1664345348964&cv=9&fst=1664344800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=3607335739&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1002090849/?random=1664345348964&cv=9&fst=1664344800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9q0&sendb=1&frm=0&url=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&async=1&fmt=3&is_vtc=1&random=3607335739&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 06:09:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 06:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664345349173&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664345349172.1676557123&it=1664345348993&coo=false&rqm=GET
157.240.200.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664345349173&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664345349172.1676557123&it=1664345348993&coo=false&rqm=GET
IP 157.240.200.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2328470677247380&ev=PageView&dl=https%3A%2F%2Fdbluemarketing.com%2Fuadmin%2Fjs%2Fops%2Frr%2Fa32q0s%2Fpost%2Finternet%2Fgroup%2Ftaiwan%2Fsslauthui.html&rl=&if=false&ts=1664345349173&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664345349172.1676557123&it=1664345348993&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Wed, 28 Sep 2022 06:09:11 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17
IP 142.250.74.10:0
GET /css?family=Alef%3A400%2C700&subset=latin%2Chebrew&ver=5.0.17 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dbluemarketing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 06:09:10 GMT
date: Wed, 28 Sep 2022 06:09:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2