{"report_id":"d887e44c-3855-49d0-9efe-704e7f64cf32","version":6,"status":"done","tags":[],"date":"2026-04-04T06:54:12Z","url":{"schema":"http","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"title":"Home - WBM Latest News \u0026 Stories Blog","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T06:54:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"four.startperfectsolutions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"four.startperfectsolutions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wbmblog.com","ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2021-08-25","domain_rank":0,"first_seen":"2026-04-04T06:54:14.68692Z","last_seen":"2026-04-04T06:54:14.68692Z","alert_count":70,"request_count":35,"received_data":3454717,"sent_data":17610,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"All in One SEO Pack:4.9.5.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"All in One SEO:4.9.5.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Site Kit:1.174.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":7,"received_data":323346,"sent_data":3840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wbminternational.pk","ip":{"addr":"172.67.220.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1117,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wbm.com.pk","ip":{"addr":"23.227.38.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":845188,"first_seen":"2016-10-30T12:12:03Z","last_seen":"2022-12-07T20:35:14Z","alert_count":0,"request_count":2,"received_data":6283,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"four.startperfectsolutions.com","ip":{"addr":"159.65.80.89","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-10-26","domain_rank":0,"first_seen":"2023-11-10T02:06:27Z","last_seen":"2026-03-29T05:37:34.892709Z","alert_count":4,"request_count":2,"received_data":5601,"sent_data":950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":1,"received_data":398845,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":47082,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58c2c7358312e9ec0baed9f7c221af4a","sha1":"3ff1f640e5e87640f96056b985cf96e9aaa7d7ec","sha256":"f67ed17410312a2b4a79f7c4d5a4c363d6dfc39f842032d1c1f9f8b7f854ecf5","sha512":"c255897586861b5231bc419828313790098b4fec3ae038d58df03e7861d6e7791258d444b56afd3129ec7f1f707ffd430ff35dbfeea3043ce386a46f0c655640","ssdeep":"","tlshash":"64e02b6810a32cba15fb2850bba7ff527262330549719c208dde9285123f947a5dacc8","size":299,"data":"","first_seen":"2026-04-04T06:54:20.214249Z","last_seen":"2026-04-04T06:54:20.214249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2ab1ec051f43a500720629e269bd43b","sha1":"6dffe606f12acac00a17e76fed20e318d1e41aba","sha256":"6fa6c3e22a6499185c9c397e60afee50a665561298cc194cad411e6faeae06b3","sha512":"bc22596461d04936645089846983a12b830e54ba4a10ed511aee968b3788f0281dd33f3af27611be4123e973d7d740c54350569ecd4196a05aab93da520f6009","ssdeep":"","tlshash":"d7d0226c881c8d081b4d818cc209a224acb0a0436516e426fe5cfe688bd36c6a420302","size":217,"data":"","first_seen":"2026-04-04T06:54:20.217049Z","last_seen":"2026-04-04T06:54:20.217049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"34c3416349d663088de1442e964084d2","sha1":"16fc76ac592df0ee28e4726daefeddc2c697a7b5","sha256":"8598cf94f2a99f2028024c206ab52cd4a03a825c6e3aa730bbf877c4d68bb248","sha512":"f0421cc5222b08c27b3934a8b6010ca6953f079280be285c88ea4dad34b78fa60ef6dcb4d10f8a4e54a7adc1acb049cdf73d571c0a19373e34d77c8b151cb8d7","ssdeep":"96:8vcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sd:ZN0LE0+1lfYsvSc","tlshash":"33628696e77a38dbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":14754,"data":"","first_seen":"2026-04-04T06:54:20.219125Z","last_seen":"2026-04-04T06:54:20.219125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb02d19b7b07a51b1330815953f35a53","sha1":"14285236ff4bb43d668119d8c5d1f2ac477e1362","sha256":"24c2562368df386552654973358e9191ebcb3ce9f315e45ab210d2803911c109","sha512":"61dc42b22719e36962df0851adc99a99590063195790706fb3c8559d361dd4a48f922895791d86e3db69688d5e2ba9df92e2c86b026ca993fd14323bdf6c8c8f","ssdeep":"","tlshash":"16c080ed7a1c0f049b5c82cc85347637a8f466435426e413de457ea843b31d3f42d175","size":189,"data":"","first_seen":"2026-04-04T06:54:20.221614Z","last_seen":"2026-04-04T06:54:20.221614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c047cf797b6faf9ecf578a98f4d3843","sha1":"58136b01885c30413af4583fa2fab921d1be8ea4","sha256":"128433a305268332848f030ce4162f32557b3082b133b64b1221647165cb8269","sha512":"5b4d01d729765a1d7e33760f33d1e1926cf1b998174171c7a561672c0cea5cc295ec609ed14436087d53faa39d6d8f2d995cae1ac27e4053622efb67a3d212db","ssdeep":"","tlshash":"08d022ad291c0b04db2c82cc8030322298b03a531822e012bf0d7aa843b22d3b829269","size":207,"data":"","first_seen":"2026-04-04T06:54:20.223865Z","last_seen":"2026-04-04T06:54:20.223865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"60c47f38603f05d7837333760d57dffe","sha1":"b6b5bcfb66f3b82862dc55b9db55d442687113d5","sha256":"3ca28e2822e70ca3937d7d21414a4fbd7e5414168b71e6972432a945422c51b0","sha512":"81d34205384c1954cdecbae083a1f6251a22a35c35bf4fb84090b1c49bfa8255eb41ad6ebee714062c395087a8b6d357ecb06745e50b302cefcf04912ac4ebff","ssdeep":"96:+5ehYHmWxJwdKSEpvS6X8pqpYFl19/K1kM1Egn/FmRt:+YDWLuD8yl19C7Fm7","tlshash":"10b1546556f29475d12330691cce1c4478b90427aa198d0ef8bec2c8bfd0e27e667ebd","size":5346,"data":"","first_seen":"2026-04-04T06:54:20.22622Z","last_seen":"2026-04-04T06:54:20.22622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/google_gtagjs-js-after","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6d069e42fe565790b1882ded89c1832","sha1":"213cf8e52f8a610409c86380fcfb94f2b9d18ad1","sha256":"f2f3a305ae0ed4e9919bc89fd52db853ed83a7560a2ccc62dd52fb33064672c1","sha512":"174d11c11ba837acb98b4c0ba404ece8a5d8cb5824920591f36ca4eb31607b85c24c8e6eebfb5cb91947af3bfd412d541ccff5add182e07d46ef740c98d54447","ssdeep":"","tlshash":"81e02768d0931cb515f718707b97ff5271523305c5715c204dde5245113f947a5d5cc8","size":419,"data":"","first_seen":"2026-04-04T06:54:20.228819Z","last_seen":"2026-04-04T06:54:20.228819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a83d617790b93171a3bcc237e5f54fcd","sha1":"7303c45db03972a9f6809f60b5ad4ad97f2f3cbe","sha256":"4c4c820440b1dd62ce13f5131314d51a3b7c1fc3bd46ee4bd9ee7afb7c6ec8b6","sha512":"d2ff57b624a878f8fab3f831431c9e4252ee8e21e38dd2cfe446205c31e4f38d2b5bfe817b897144b2d315472154ba89c44c73a084e7ebe15a9cc421686023a2","ssdeep":"","tlshash":"bc70008222c0022020200000a0ce8200008000228020e880800bc00880000008000c88","size":24,"data":"","first_seen":"2023-11-21T14:57:13Z","last_seen":"2026-04-04T06:54:20.231042Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/comment-reply.min.js?ver=6.9.4","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T09:33:01.251676Z","times_seen":56943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"301115e5ed2775e863603be2e1668105","sha1":"0cc67af72b5af590b357c038adbc838256f640b9","sha256":"b7fe05bc84becd3f6e52c6cb0169d6693f08146ef87052a289a566fe9252dddd","sha512":"ef89967a902388b693ae01c4b361a3abfcccbe63040e1fb45294ce36dd88f20dce7708b4802551b7303d1e2ab3de1ad3388785f5a82d2f2a3f62e8f45867e729","ssdeep":"","tlshash":"77900413505dcd01050551330c3c4734435c0ccd4451fd047d10cf3c545010340cd030","size":41,"data":"","first_seen":"2023-03-07T01:20:50Z","last_seen":"2026-04-04T06:54:20.232197Z","times_seen":2376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3876d62b4071bf73acf49f8926922bc","sha1":"632deda2356540a18f2dbef22655a6bc743fa50c","sha256":"5c14700469d9a0a7f3ea59dc8c55c1dd49f32354d44dda2162d69f3feca5aab1","sha512":"ca357f1735b93ca7ab5a499d949a8b0d4764350957ef22eb46bfa804705fcf4afb5aec4da480793cd9b780bddd37ab9933d3f6322911e07325b5c754b2e44633","ssdeep":"192:4u2Jr2Dp/i0RjxaSHb0qZGdu3A0JAx4wvhURKGT9Jf4lYUjUzeGJ9bSnlD3oG991:4uBZSkIX3FPx","tlshash":"c512ed21bc2c8c2b2aff466db855db5273d91079f6cc4f64e8c6dc0954ea68093d3b1a","size":9483,"data":"","first_seen":"2026-04-04T06:54:20.233353Z","last_seen":"2026-04-04T06:54:20.233353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=11.2","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78b8737d57a7d0b029efa514907cd506","sha1":"67c6ce628b259c9a8c500586302d2ed9c9ea98ad","sha256":"2d036346b18bf4c27bc91f0416f8b59427e32bfc6c2724a27e6fe2e5a7b58574","sha512":"c315bb6243343e3f77e1bd49595388037d60b342630cbaa83bb70acc23c5521fbff57a793070186286d23edbd6ef22791ea2c6584455348cc126c859e123ff0d","ssdeep":"3072:pqc9xwdxU9Cppi7ekXySwEzaN2zaC7Wz99T5jOlv13B+ktDlJ:pSdxqFkAaoaC7Wz99T5yJ13B+ktDlJ","tlshash":"cb444c1df12430eb92fb2669d57f671930776966f90ac8a4f03ad09c0ca4f4a5273b6c","size":262812,"data":"","first_seen":"2023-03-07T15:17:10Z","last_seen":"2026-04-04T06:54:20.155524Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e736c16baafe31b3d78b9830e5b7f9d4","sha1":"e7fb46ac3c33b42830a6b654eed6ccbb4c61f698","sha256":"7e62196d9f7ddce029c491b40f999f8aff2b211b63bee696dd807301fb10b329","sha512":"e76bbd8b66b9ba9257030cd351a991b8a27c860f944afd48c694289e422d4ee6084339f497758277006ecb43eef4df9a8ea5b64a2651a2cf50f7fb7b24955055","ssdeep":"192:+u2Jr2Dp/i0RjxaSHb0qZGdu3A0JAx4wvhURKGT9Jf4lYUjUzeGJ9bSnlD3oG99y:+uBZSkIX3k9","tlshash":"6412ed11ac2c8c6b2aff466dbc55cb6273d91079f6cc4f64e8c6dc0954ea68093d3b0a","size":9483,"data":"","first_seen":"2026-04-04T06:54:20.236398Z","last_seen":"2026-04-04T06:54:20.236398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-subscription/assets/js/frontend/tdsLeads.js?ver=18da952bde8fab1875ba66b9c5072e53","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59ea669c4fd56e1df2837732c6664b73","sha1":"990b6c99380f39a23dde906aa2cda4130eaae44c","sha256":"0dca9aebd44a0d703986efe180554294687479465a34250979df778be1597350","sha512":"f3e8cb4b6b30e18f2b369dac6c6b39a27d261b1fc07dba3e24ee4dd32a152d74c504a42a7727061ca4de3bc399335cfa4779889763bff1050817ad41e43664ca","ssdeep":"96:381hWJRHEBt8n5+1MQMH5dUjX8Qqf4b7vCDeiBh:SAH5ujI4v2eo","tlshash":"28a1cf8d59a711a78831333a6f2a3018e774143bc702de547e8f52692f754a803b2fee","size":5045,"data":"","first_seen":"2023-03-10T22:12:07Z","last_seen":"2026-04-04T06:54:20.20101Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb03278884b52ab7cf0f3e0cc4305f18","sha1":"c4f92addd159ee779abd2d53f5dcf7cf5832c30e","sha256":"7b0dc6b2076cb46a3661a76d96bf0a32d15f42af5c9e43b568a0beeb70e0d836","sha512":"e95386d7fa4c9df2334f1618d06629239df72dcb4d7ec1b53c8e60139e5ef5cade1e98a0ad620f18d66a3d7afb7f678c36586061432609dd33aa2163c1db3f4e","ssdeep":"192:Yu2Jr2Dp/i0RjxaSHb0qZGdu3A0JAx4wvhURKGT9Jf4lYUjUzeGJ9bSnlD3oG99A:YuBZSkIX3qd","tlshash":"4b12ed11ec2c8c2b6aff466db855db6273d91079f6cc4f64e8c6dc0954ea68093d3b0a","size":9483,"data":"","first_seen":"2026-04-04T06:54:20.239069Z","last_seen":"2026-04-04T06:54:20.239069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6a3dbc7ddbcccf0aede4e20b4ecaf9d","sha1":"8b033f8be1754bf672994a9a261a58fea3a43def","sha256":"3ec0faffa055727863552c6a063682705aa9e4d022bfd085bab2ddee8b66ce06","sha512":"e8215cb58a2ea5e3050ced7cc9420f17d71d39afd7505b85d54b0172ff516bc054f54dd1e45e2d7fe76cc6933a10f1cf48b25df90b2b5642941f91a425705890","ssdeep":"192:Cu2Jr2Dp/i0RjxaSHb0qZGdu3A0JAx4wvhURKGT9Jf4lYUjUzeGJ9bSnlD3oG99h:CuBZSkIX355","tlshash":"3012ef11ac2c8c2b6aff466db855db52b3d91079f6cc4f64e8c6dc0954ea68093d3b0a","size":9483,"data":"","first_seen":"2026-04-04T06:54:20.241525Z","last_seen":"2026-04-04T06:54:20.241525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75dd8155c29ea45afc3adbd9956e2dbc","sha1":"3ba7ce3661973d3354b28edd737e110fecfe6361","sha256":"77dcbd166ce432378bd119a5aa44cab7e40ee491db2fb08c22dc2c11b05e4c0a","sha512":"21b257cdff49b1e7848fb835c6dfd028d616dcaa53ef7c859ac196cc291357356da68da0e3d45bafe0c8411347093406a867c8e28fc8e5cc734e09f2723fe7d3","ssdeep":"","tlshash":"4d4116055c758ea643db1720bda0cdb632cd04a263dd6be4f2e5cd4862dc685c38632f","size":2195,"data":"","first_seen":"2026-04-04T06:54:20.244041Z","last_seen":"2026-04-04T06:54:20.244041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5efcd268afcb4a1032937f735f52055","sha1":"15b20519e95012e645e5b12f0b7019b8b008b52d","sha256":"ab13d25a9711dc3b10dadc11a63fd84087e5284d218c2098a187054e5bd10d1d","sha512":"2a865a5ef08e4de62fb6b90d4c76d27bd094fe616dfc8acf41c07c7cbe3547c163cb81525db36db23fbb849443994531f20a693751f69a784977ffeb0b14dabf","ssdeep":"192:d84LzT10OeiefJZ8q5u+oUh9wDOLsgZD2eXEZ2U+GEe2R+WKGRSU2QqzgKevwJA9:dtL/2tbR","tlshash":"8712ee123d388c2252ef475dbc94dba233cc01b2b6ec6591e999cc9a46dda40d38778f","size":9508,"data":"","first_seen":"2026-04-04T06:54:20.246354Z","last_seen":"2026-04-04T06:54:20.246354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"518df21145b5d7528f762e9010b42c9e","sha1":"fa7e737ad017c7376713fe6cb0d2ae51f9f89799","sha256":"73b5bf8238949100ba912e87b71b53fb3c0f550860ae084ab467a16d6e2dc739","sha512":"decc62b3a6b1caed8425c4a19f7a9fe4c3231d7c6bf654cbaad04ba755960f5359c73dfa3560b8d09b020d52ccb1ab99a872fdf3d97a6a2f272645b5e37bc5b5","ssdeep":"192:jt4LOiWf00Miefeq5u+oUh9wDavLsgZJ2UgEZ2mc+GEe2R+WKGRSU2QqzgKeXev/:jSvrLTe","tlshash":"7222dd113d388d2252df475df894daa223cc05b3b2ec6992ee98dc9a45dda40d38739f","size":10177,"data":"","first_seen":"2026-04-04T06:54:20.248566Z","last_seen":"2026-04-04T06:54:20.248566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a6aa0aafbb19f0ba3b1a01b2cef7a","sha1":"3936ab678239e42c8d9f69533ae8a3e88dedff04","sha256":"0f4f31719c0adf7b4980111ecd53f6fbb6f59de1156bfaf8ac3dcc97e759f4c0","sha512":"1cd5ba3aad60791c177a5ad4345234a873bdf97022e4b5a90422c23b901a19a26ae2dc0bd792d08d23281c68c976f5b2b3870eb8053b0bff9126564e5521ba07","ssdeep":"192:QXgu9GWOHFZHb0qZ1q5u3AHZWJAy+ZEe2LpiqeJeOKzwJAzGG9o8Zqm1Y:6tOl4Ki","tlshash":"83f1ff123d388c7596ef4358b8a5df6233cc01b2b2cc6a96fa99cc9555ec244938738f","size":7871,"data":"","first_seen":"2026-04-04T06:54:20.250895Z","last_seen":"2026-04-04T06:54:20.250895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a5ca4592485ff3114c3e05bccb77a21","sha1":"7df455b5fa1046bf3b6140ef7f4aafbbd378fdc7","sha256":"ad64a712c22ff7b9763d3ea06775e01091e99bf5e968a44ee2a06e1ae744f0ee","sha512":"918371af5e4f37d6508d9e530edb0b0d2033a1e70e039525c98909015b9f2b37c4beabb8c8933e210dbe086f66a886d4beb7f10dc5c832d34521f11858b1e15f","ssdeep":"192:X84LC8f0teiefJZ8q5u+oUh9wDOLsgZZ2eXEZ22+GEe2R+WKGRSU2QqzgKevwJAp:XtLCdivl","tlshash":"5112f0123d388c2252df475dbc94dba233cc01b2b6ec6991e999cc9a46dc680d39779f","size":9487,"data":"","first_seen":"2026-04-04T06:54:20.252938Z","last_seen":"2026-04-04T06:54:20.252938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-04T09:38:23.552819Z","times_seen":89640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0C54D4M78Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"204a6e6f7a1276bfd6bdf554b2866f8e","sha1":"757bb1a9c6609abc155983236f92551024f34dc8","sha256":"4d1fae2a11656a0f46eaf815bb28b2cbf8f8dbf1bbff2eeda86b29e6e46d2e94","sha512":"b03a0a1edd0bb4ef03ef66d69925f2ba58bd3e9097d7602d9a06d72bb52f2086e80d93b4e42427ba93a045dfe591c5ad5a101d5483fd02ece7731ba564fda447","ssdeep":"6144:93eqQGrLr8DP9aGb/F8x/OW+/5EiWH1joHeLlbzx:7rH8IGbt87jn","tlshash":"368409cdb3d6746643a3b478903f008ba17a69e2f84cc899f185c8d42e74a994277f7d","size":398241,"data":"","first_seen":"2026-04-04T06:54:20.182579Z","last_seen":"2026-04-04T06:54:20.182579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T09:40:22.859742Z","times_seen":131330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bd6c6d0e6aa6b29530d93ad8ff0fcd5","sha1":"4d1ad85e16e967d4fb87b83ac167742139f14d03","sha256":"d305d8cb7fb9dccd762307f1806ca1617d2f07e4ba16ee8b97372660c25f4b50","sha512":"5c011ff3cc972549a6eb0b461d3bd0bf2952a7e48701e17f5e9f45a28b1dc450f336ea83403b5e9683c3e0b2367fcb0b09f9261a64800a8d257e0ebe1d19072e","ssdeep":"192:EYx5GYs10AFZHb0qZaq5u3AlJWJAy+GEe2LpiqeJeOKzwJAzGG9o8ZqUUX:Rs10ktP6","tlshash":"64f1fe123c388c7156ef4759b8a5df6233cc01b2b2cc6a96fa89cc9555ec244938739f","size":7728,"data":"","first_seen":"2026-04-04T06:54:20.254954Z","last_seen":"2026-04-04T06:54:20.254954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a102ca1cfe434ce300a9228c92fba846","sha1":"db729af183b72c88dee2ed15c5f94a46081effb1","sha256":"e8498e1b536520f7b5e30b6b0bf49bc94d06f92be504303ce51e510ea0a2cf19","sha512":"2f29c63e014edf6ac4aba4a1c5868514fcc5cf8e2adc7cb784ce0bb464d731b722eaa4f968fede3de44138e21b948b66157faaa8f8dcab1e50927c546ddefd2e","ssdeep":"192:lt+yio2WiefJZWq5u+oUh9wDa3LsgZJ2UgEZ2mc+GEe2R+WKGRSU2QqzgKeXevws:lSqPW","tlshash":"4c22ce113d388d2252df479db894dba123cc05b3b2ec69a2fa98dc9a45dd640d38778f","size":10120,"data":"","first_seen":"2026-04-04T06:54:20.256728Z","last_seen":"2026-04-04T06:54:20.256728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0b05528b46b2bf28961d8fb3d1b222d","sha1":"bdd2413cc68b5d512a0cf32f642e83651fa4a443","sha256":"013ccc6628d7c3b8fd592a2f7bd38815c46ff96b7485be934cfa7ac7c806dd4b","sha512":"7b51599133e1413eea9358d57ff5187731339a1590cc7b8ded78a9899c5d659876d5efbb4350eb4274922566835eba8c2da4646f524d9ef20deb745a86624bf9","ssdeep":"192:YtGNbbAo4mcHb0qZ1q5u3AlJfWJAz+GEe2Lpiqe5OKzwJAzGG9o8ZqwzV:udsHh","tlshash":"bdf1fd123c388c7556ef4758b869df6233cc01b2b2cc6a95fa99cc9955ed240938738f","size":7898,"data":"","first_seen":"2026-04-04T06:54:20.259676Z","last_seen":"2026-04-04T06:54:20.259676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T09:40:09.023556Z","times_seen":638437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e98296229ffa777101f2ef59ae5f7c5","sha1":"cb53e2d6108ffbbbc4a96307eefa1ed6b3a4a4d8","sha256":"0dd95d9bfc689b8862a9dd8ae8166ca21df149fb24f3d0830423b66ae00d426e","sha512":"abc58d37c06ff508758ddd4534356897c5f11b8424ef5ce8fee8397f47e9d36190efaf30ae251c63f5d4cbcf668a5935eb1f031f6e358a145a5d05b64fee8c93","ssdeep":"96:PizHaI2ANSBmnDZdGSXHD5h504TLFjWMG1:Pi1EmnD/GujtljWMG1","tlshash":"14b195656948a65ef312112e81bff21a1ca4fd77fc03841897acc4e8cbb0b0e5e5566e","size":5160,"data":"","first_seen":"2023-03-07T15:00:57Z","last_seen":"2026-04-04T06:54:20.169535Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"91e7df558537b85afa96ba212276b8c8","sha1":"3c47c35a03638563cf9fdaf02cc17f7e2ddde8a4","sha256":"3aacd14ef1273cd768acbd04d5b64f12bb9565f31dcc792a7189a8f040b5f173","sha512":"eac7b0f330d69b1a9b1543f800abdd657a4576b45cf9cac23c65ac67dca2107eb4fe2b9a60d9a23f60f0317626915b1d03e89a8b67c6d7bb99e1b10b4c7627ae","ssdeep":"192:xXho2sdb0vZGoq5u3AqJaC+GEe2Cepiqe5OKxwJAzGG9omfqkjG:jrK","tlshash":"29f1df123d3c8c7556ef4358b895dea633cc11b2b2cc6aa5fa89cc9565ed240938339f","size":7644,"data":"","first_seen":"2026-04-04T06:54:20.261704Z","last_seen":"2026-04-04T06:54:20.261704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8df8c3fdd8da00031292b3b121800ada","sha1":"b8d8a31f26510cfd419b7a5fc29460a755dd90c6","sha256":"a22f85f1a257dfe812b91e347ffff79eee4cff5eb89f0b429a32ae1ab96d8adc","sha512":"81c8496b3119570d05e96392d7c649f4573e92573e8f3b9ba25353ee7062da9bbc801218a5d889d9e75488fc46ecb3ac64635c3bd1e5586993fac74b37ec948e","ssdeep":"384:HbmQe8pJqhLxIT8zUfOxialrWc8ojhDgv3lU2okqLCzhasiXuhF:HC+Jqh+T8zNiposVU2ACzhasieX","tlshash":"82f28404f034d7b722b225bce27bd364f0778965ff49087244b997b419a2e5523be22d","size":37581,"data":"","first_seen":"2023-03-07T15:00:56Z","last_seen":"2026-04-04T06:54:20.142549Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7262a2163acd146aeaed504583c0c61","sha1":"d8a86ff95782d6ff48059b452836cd8343808977","sha256":"45f97b806e1899eb603c167a9fc7d5287345fcd9c43f433b7d874214042aaa1d","sha512":"00bc748e612d2f31d14bbf9b7832f50a17303f322b60f9ce4291933b27207845a9852b6b12566561f7ca60cf95ac7748ba4cb59f945df63903ba7c81799879b0","ssdeep":"192:Ht8zh7d1htJZgMuo2WiefNq5u+oUI9wDbvLs32UgEZ2mc+GEe2ZKGRSaiYqzgKex:HEfF8rJk","tlshash":"9522ec113d388d2252df479df894cba223cc01b2b6ec6992fa98dc9a45dda41d34739f","size":10694,"data":"","first_seen":"2026-04-04T06:54:20.263534Z","last_seen":"2026-04-04T06:54:20.263534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"four.startperfectsolutions.com/scripts/sold.js","fqdn":"four.startperfectsolutions.com","domain":"startperfectsolutions.com","tld":"com"},"ip":{"addr":"159.65.80.89","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"530a3e5c35f1fc5032e6da4e418b5bf1","sha1":"89b25d592cfeecffc5fcba83be64c0021da281de","sha256":"1eeeb55073f0f035b4d71a14a11dd305c8aeb98d6095e0172ce2b9f8ea405a8b","sha512":"fbfd58d761f84b8f7c0367bcbf62718d77836624639f78482325b0c55e73d7ac57e2bd112632ceeec7d4a0767e1410d59a4380db2ea84c54b86e261b0c5f730f","ssdeep":"96:WulvicF73FSCzSR3IT5l6tRs1W06oOkRqSWD:WSvz73FSCzS9A6tRs1W06ofRqSWD","tlshash":"43a1305d28e22025450739f9cbaf4118f935530b265e8c907d2d6a44af7633d8bf2bed","size":4941,"data":"","first_seen":"2026-04-04T06:54:20.172801Z","last_seen":"2026-04-04T06:54:20.172801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T09:40:44.628337Z","times_seen":684998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f16abac91be17657ce2df11a9af0091","sha1":"8880b6a828ed299a3b82df3eea8ba812fb931feb","sha256":"08aab771acb04256654ffa20282e0bfff1cdc78ff06452ea01019325829578ab","sha512":"655c856d766a12850d045b2b0ebcca736b55f35b1e4b5dddb1c57ae298a3f6c7c820dc8114b435a6210773af78747a7e0ccb6b5075a0a97ccf56fddfe8a2593f","ssdeep":"192:Jt8zhnuud1sJZgMeo2WiefNq5u+oUI9wDbvLs32UgEZ2mc+GEe2ZKGRSaiYqzgKI:JE5qMrby","tlshash":"0e22fe113d388d2252df479df894cba223cc01b2b2ec6991fa98dc9a45dda45d38739f","size":10656,"data":"","first_seen":"2026-04-04T06:54:20.265199Z","last_seen":"2026-04-04T06:54:20.265199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a67c2963a0bd2c917161d2b6c04ad60","sha1":"e86d11521b7c6c0fa2112b36240b2241a90ca0c6","sha256":"c3030b75e27cf0593c5e126ef0bccf4acbb5c899b8a48cc2becac4ab9420369c","sha512":"18392cbfcb5b7e75bbf832acb65a6507d66b81df52b03e07973282bc546a191a591f2b52054bccfaedc404978b3d1ef24a4aa4cc41140f5073cba80c94775c26","ssdeep":"192:kyEZbj8o2mcHb5sq5u3AAWJA9+GEe2LpiqeJeOKzwJAzGG9o8Zq6n/I:bJng","tlshash":"ccf1cc123d388c7596ef4358b8a5de6233cc01b2f2cc6a56fa89cc9555ec280938739f","size":7556,"data":"","first_seen":"2026-04-04T06:54:20.26672Z","last_seen":"2026-04-04T06:54:20.26672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5a86750edbe918fdb7a3773c17968e3","sha1":"c896913a684e4bbc46a03eb6db46df2de788d4a0","sha256":"856fda2a1ce44f775bbd045c244326bb9c033a80508361088e2b86059d66e564","sha512":"ad386b9f6b3757fd31a0afdf676efc54889af1a7da14a6c2be133ce01262183afc534c2ba0f67e3222e6f0d02d2ba1a8ee76b23b09fc948611da6bad0a1c43a4","ssdeep":"192:90hCIHb0qZSTq5u3ANJaP+TyPepiqeJeOKxwJAzGG9omfqOBVP:uBp","tlshash":"37e199127c389c7156ef4358b899df6233cc11b2b2cc6a65fa99cc9556dd280a38339f","size":7308,"data":"","first_seen":"2026-04-04T06:54:20.268559Z","last_seen":"2026-04-04T06:54:20.268559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbd8250ded0b198ab7b4f13649839a23","sha1":"eda66e62feb38ad8929edb18066277e7880a110d","sha256":"c7e085f6700d0563de0e37ecbfa4da314e63b09f9a017182decc194a10aa2f23","sha512":"b0169c681de4c3f94ebf745f9393fbb7801e66b556ad1be2668cfad70f4444642ba56505aaa4ed9743acf5e7abaf360b6921ec1ed56ccdd6ed1f3d6bdd846f57","ssdeep":"192:UMtjyoXLqFZHb0qZ1q5u3AlJfWJA9+GEe2LpiqeJeOKzwJAzGG9o8Zq8bez:UMygEbi","tlshash":"3af1bb123c388c7556ef8358b8a5de6233cc01b2b2cc6a56fa99cc9555ed684d38738f","size":7637,"data":"","first_seen":"2026-04-04T06:54:20.269822Z","last_seen":"2026-04-04T06:54:20.269822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"292c0080399e00220bb321a5672abbfa","sha1":"f2deae2a2a3104e3216210fc26f31a9951e88f44","sha256":"d163025a2352c13c337fdd082ac1f7ac2086e292b4df0dcb1e986cf750fbeb6c","sha512":"41cae30c9b5881ae1a6a04a484da17045f3f462083ef4ed9d71b350ddb40f1025141157b71e35c12b83f35002270dbcb30fd4ad86bacf5dc0722240160df6aa9","ssdeep":"192:GMCjyJXFN7uFZHb0qZ1q5u3AlJfWJA9pEe2LpiqeJeOKzwJAzGG9oH5qaPM:GLUegz0","tlshash":"89f1ed123c389c7596ef4358b866df6233cc11b2b2cc6a96fa99cc9555ec244938338f","size":7911,"data":"","first_seen":"2026-04-04T06:54:20.271187Z","last_seen":"2026-04-04T06:54:20.271187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4070a2c887d19417b16aa63b391024da","sha1":"e07c074e1df79043a96351038c3f79507a0966ab","sha256":"a331ac934ea22f8e3f439fda6d49e436c2d298062813569a762a35c025115903","sha512":"c582d3fb3eb5ae0c52258fa702af65d705a1ca642a41eac986f977daaea760ba0be363d13cc331b49b4f2852affad63c5ab1c4863aff118776b52688aed6f747","ssdeep":"192:AMrjyJXWN1iFZHb0qZ1q5u3AlJfWJA9pEe2LpiqeJeOKzwJAzGG9oH5qZJyj:Ai96gWW","tlshash":"20f1de127c388c7596ef4358b866df6233cc11b2b2cc6a95fa99cc9555ec244938738f","size":7940,"data":"","first_seen":"2026-04-04T06:54:20.272325Z","last_seen":"2026-04-04T06:54:20.272325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/comment-reply.min.js?ver=6.9.4","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.9.4 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Nov 2024 18:15:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6740ca4b-bd2\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T09:33:01.251676Z","times_seen":56943,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/footer_bg.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/footer_bg.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 107441\r\nlast-modified: Fri, 16 Sep 2022 05:28:10 GMT\r\netag: \"6324096a-1a3b1\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107441,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x531, components 3","md5":"d6053a76e1eedf479aeb1bea31d38f02","sha1":"ba5661842236bdbcf44567b782fa96d6c39ef881","sha256":"231c611d7b6ead714207b6ad2a59ebf8f84feb7142c87326d9d145b80b884b6a","sha512":"23b8c4e73fe08239905e28c93c3fcb6b7b14845e25fee951e13102bfa62771dfd1ebc0b669467013464b10d714c72e9c57bfcad88aa1997b7e93dc337005819f","ssdeep":"3072:rcM6MrUr2r/E/iUN/Qer2csYhneispnE9L:rTs0M/is/QerhTlNso","tlshash":"d3b312880b04636ed25c00356e5f8aeb92579e21a3376367112e07f89f35f789c7d3a8","first_seen":"2023-10-13T11:10:10Z","last_seen":"2026-04-04T06:54:20.132724Z","times_seen":22,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/page/2/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cache-enabled: True\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlink: \u003chttps://wbmblog.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://wbmblog.com/wp-json/wp/v2/pages/324\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://wbmblog.com/\u003e; rel=shortlink\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"All in One SEO Pack:4.9.5.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"All in One SEO:4.9.5.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Site Kit:1.174.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":416291,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8909), with CRLF, LF line terminators","md5":"10807ba335d4e37159736304002e2658","sha1":"763cf1eae083ba5bd95a6b9efa497305899c8241","sha256":"fc439c6dd03d07e5c9deaba44a871537cfad5e9e450313449c1ad075c0ecdf11","sha512":"bcef572694d6b06f6d1e7d56ae5bbb66a8352eef6aec764f2107050248b51c8460239af0891fa8a5eca0923f48244cd9269c80cb28b3f072973467f27f137a7b","ssdeep":"1536:ojO6qypfrjul9Mi245nlOCITJhtabYjpi+fEyRcdRxkIX11L0jxkIXVLWHxkIXCE:ojO6jlr2x24XLvIQ9a/uRqC","tlshash":"0c94d6266978243bba7b0398b5b0a734efdda057d3c90da0f99cee804ff59018393655","first_seen":"2026-04-04T06:54:20.137145Z","last_seen":"2026-04-04T06:54:20.137145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 02:19:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930efbf-58ea\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T09:40:22.859742Z","times_seen":131330,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Aug 2021 01:07:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611868ec-92cd\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (832)","md5":"8df8c3fdd8da00031292b3b121800ada","sha1":"b8d8a31f26510cfd419b7a5fc29460a755dd90c6","sha256":"a22f85f1a257dfe812b91e347ffff79eee4cff5eb89f0b429a32ae1ab96d8adc","sha512":"81c8496b3119570d05e96392d7c649f4573e92573e8f3b9ba25353ee7062da9bbc801218a5d889d9e75488fc46ecb3ac64635c3bd1e5586993fac74b37ec948e","ssdeep":"384:HbmQe8pJqhLxIT8zUfOxialrWc8ojhDgv3lU2okqLCzhasiXuhF:HC+Jqh+T8zNiposVU2ACzhasieX","tlshash":"82f28404f034d7b722b225bce27bd364f0778965ff49087244b997b419a2e5523be22d","first_seen":"2023-03-07T15:00:56Z","last_seen":"2026-04-04T06:54:20.142549Z","times_seen":115,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 18:12:07 GMT\r\nexpires: Sat, 03 Apr 2027 18:12:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 45699\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T09:44:11.946405Z","times_seen":198896,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":141,"dns":1,"connect":27,"send":0,"wait":16,"receive":4,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbminternational.pk/media/home-page/men-care.jpg","fqdn":"wbminternational.pk","domain":"wbminternational.pk","tld":"pk"},"ip":{"addr":"172.67.220.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbminternational.pk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 10:21:58 GMT","end":"Tue, 09 Jun 2026 11:19:55 GMT"},"fingerprint":{"sha1":"36:5C:8D:09:A0:16:75:B5:B4:C2:16:90:5A:D9:2F:EF:34:F0:C5:C8","sha256":"C8:B3:18:F4:8A:C9:E2:49:3B:9C:3B:63:3E:10:89:D2:32:74:8E:1A:21:46:B3:F8:47:55:C5:97:9B:FF:D5:41"}}},"request":{"raw":"GET /media/home-page/men-care.jpg HTTP/1.1\r\nHost: wbminternational.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nlocation: https://wbm.com.pk/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBm9m6da5nl9TFIIgzHXrpmeGC5hrz4ufjiUMJ%2FsqbSt4pn8nPrZ9ZzvUGnPvGsiXC2RVQCnMuMV6xsp%2BYBaBFXsK0wAVyfBevQj9sMgr%2Bb0C0r1nFj%2Bw4IVKLAUQVv%2BXZFqVvY%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\npriority: u=4,i=?0\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 9e6e65ddad39b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/ramazan-package-1-696x394.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:48.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/ramazan-package-1-696x394.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 79339\r\nlast-modified: Fri, 16 Sep 2022 05:25:28 GMT\r\netag: \"632408c8-135eb\"\r\nexpires: Sun, 04 Apr 2027 06:53:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 696x394, components 3","md5":"1c9321bb44b3f4443796c76e1f38a346","sha1":"da5dfee031c1cf97c63c0887f77470ee4d8f2eb3","sha256":"128503042e66c62afddd038c77bc43b4e037ad293d57a8fab47d26857c82021d","sha512":"39b9cb1615080dcdd05205b07cff3022efd482f4f53786b8c9d4a8f10b8f99b864c3166a630482fb62637fef56acaf598f85c26abcf008ba2836c46ade43c5b4","ssdeep":"1536:8R3fHdzG495MEbIw+s++xaRL7Kp9C0rZO/iUGOw891b4rKN67aSr9:CQ4buixaRL2XCSrK919EaK","tlshash":"bb73028d9ca486cf8c3d86a85c74df81838fbd10e11969c61b7cc78a7e256d1b4e729c","first_seen":"2026-04-04T06:54:20.150603Z","last_seen":"2026-04-04T06:54:20.150603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbminternational.pk/media/home-page/men-care.jpg","fqdn":"wbminternational.pk","domain":"wbminternational.pk","tld":"pk"},"ip":{"addr":"172.67.220.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbminternational.pk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 10:21:58 GMT","end":"Tue, 09 Jun 2026 11:19:55 GMT"},"fingerprint":{"sha1":"36:5C:8D:09:A0:16:75:B5:B4:C2:16:90:5A:D9:2F:EF:34:F0:C5:C8","sha256":"C8:B3:18:F4:8A:C9:E2:49:3B:9C:3B:63:3E:10:89:D2:32:74:8E:1A:21:46:B3:F8:47:55:C5:97:9B:FF:D5:41"}}},"request":{"raw":"GET /media/home-page/men-care.jpg HTTP/1.1\r\nHost: wbminternational.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-length: 0\r\nlocation: https://wbm.com.pk/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FkgNMt8bJd%2FyGsblAoyIeiQOMpiTYVf2Fb7yRgZY01rNimG%2FlwnVFHAQnbSjfog0dLe7vk459XXHpZtRHx35Y61eVbBRZpzlNIXBazoYYRyAj7cHzG7pZtbU68s1K8lKOeSWcTu2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e6e65dadd4a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":28,"dns":29,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbm.com.pk/","fqdn":"wbm.com.pk","domain":"wbm.com.pk","tld":"com.pk"},"ip":{"addr":"23.227.38.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbm.com.pk","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 13:17:33 GMT","end":"Thu, 25 Jun 2026 13:17:32 GMT"},"fingerprint":{"sha1":"F0:20:5F:57:F2:0E:F1:C2:BB:7E:FB:34:60:70:7D:24:31:C4:90:BE","sha256":"B6:4E:0C:3E:03:D1:64:24:C3:AC:5C:C2:FA:CD:07:C9:0E:22:25:91:53:16:0F:BC:99:11:B0:31:22:8E:68:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wbm.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wbmblog.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77049\r\ncf-ray: 9e6e65e0db2d5690-OSL\r\netag: \"page_cache:60508831962:IndexController:4bb8add758c82555ca949854c7ad3d41\"\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com\u003e; rel=\"preconnect\", \u003chttps://cdn.shopify.com\u003e; rel=\"preconnect\"; crossorigin\r\nset-cookie: localization=PK; path=/; expires=Sun, 04 Apr 2027 06:53:47 GMT\n_shopify_y=da2eb635-835d-4ceb-8377-1509b0446513; domain=wbm.com.pk; path=/; expires=Sun, 04 Apr 2027 12:53:47 GMT; SameSite=Lax\n_shopify_s=2000e651-c923-4a1f-9738-85e55ab75839; domain=wbm.com.pk; path=/; expires=Sat, 04 Apr 2026 07:23:47 GMT; SameSite=Lax\n_shopify_essential=:AZ1XROi5AAEArfdhiVv3VB2L-slfRP5_lj3c3v78WV1cFl8C-hPoFyQpUX9BXXMJzfOOzK39BIDOJhsckxISx7tigI8Mquysij3Q11qJzoKj1FXPliKG6wmqZ57fIoD9gIlzrPODX3-aaDJLLnOYfR6yE5yoCZqZQYZHnmlXWvjzaDvo7HKko3DQqOBCjuGmmoPFwMXRKIDTkxYhZAQ7n9JtEIEvmZNfEbyntjh7_J_rwfifMbiL1FnL6ZRwm2qL1qt3_CBjbQwbwZ6mSQ1sBllDSqaUtyeZ4cyANguWi-dXbXjdF8yn1XY-z7donHDenIeByEaZkS-3U1s17qnJifpA3dF_nUfna72Mb-OJGprvj7qUcXsDxa2DB5DeuvXeg78AOAPehgTRN5m6Xr4yqiziOymOHC0o-hToi3ieuvXmez68X5UvZ-uEaNNfm0sQ6g:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\n_shopify_analytics=:AZ1XROjPAAEAVC0tKB0fir6F7xGmLbsEtPoxTnulpMIlWXDZF_R2bnQsyFhy1Jz9omhWEs-XIGm2VBDIXS_Z7zoLZEiUCSlnyn8KjSXHjTgG4RPw8JNbtXy4YFAC0g5zVlcIRusRert-exnMS1L5HdRsOpAkXof7PgRffYsFS2g9yg:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\n_shopify_marketing=:AZ1XROjPAAEAbAjyuyVmLMqqb1KMxMRA6PIaUIfdKLqQIQdamYs99EqHu2abT2WAuTWVTZ6mqd-04LTzuj8I53KhdJDPM0sfC9ikW2ISYDUnrUFVLue4Q6-rs-3yXCuv5aH4:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nshopify-complexity-score: 0\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=7889238\r\nvary: Accept, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-language: en-PK\r\npowered-by: Shopify\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-request-id: 20071d10-ee7b-42d6-803a-e7596c4ce9e5-1775285627\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=605DcIqp1WsZG%2FgL6ec1WM4b%2B6JLsMQMrrdjcwkbQtk%2F58cT3jPttwo4COmol8JljqxFrkA9514jajQtIm1DluAEWJhqO%2FaF2WF%2FWx31QDxxhUxHf4EnflhZuMI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nx-download-options: noopen\r\nserver: cloudflare\r\nserver-timing: processing;dur=30, db;dur=5, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", theme;desc=\"158309417178\", pageType;desc=\"index\", servedBy;desc=\"fn85\", requestID;desc=\"20071d10-ee7b-42d6-803a-e7596c4ce9e5-1775285627\", _y;desc=\"da2eb635-835d-4ceb-8377-1509b0446513\", _s;desc=\"2000e651-c923-4a1f-9738-85e55ab75839\", _cmp;desc=\"3.AMPS_NO03_f_f_9F*85WBZR-eKxZzwMtxJwg\", compressionLevel;desc=\"5\", cfRequestDuration;dur=111.999989, cfExtPri, earlyhints\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/newspaper-rec300@2x.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/newspaper-rec300@2x.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 264853\r\nlast-modified: Fri, 16 Sep 2022 05:29:20 GMT\r\netag: \"632409b0-40a95\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x500, components 3","md5":"2fd8b32dad175f589cb4d03be7b5a952","sha1":"88c1f10e8d679331b6f6a78493920b5fa3b5db2c","sha256":"aa17ab7845baf69a3f1b8c77182292670403a88e45b461f02610cd4b7f8405b8","sha512":"a8f9be814437ac4a9e2fe7f85e90ef727beeb7f583f93fe86ab8cf9580acd6c1681de56def01551ea66118ff0969c9928fa2942b96896d42ec86e72faf90b99a","ssdeep":"6144:gRMftk/+4pZiNzzWypa592yEWfNhOJ+81y4F48Eh:gRMVk2hNz1WYy4+L","tlshash":"c7442338710ec06e9081d2b9a791865823461fdcbc6ec0cdb7ec6507e9f567e0a7d86b","first_seen":"2023-05-17T21:23:14Z","last_seen":"2026-04-04T06:54:20.15311Z","times_seen":4,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=11.2","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=11.2 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Aug 2021 01:07:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611868d4-4029c\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"78b8737d57a7d0b029efa514907cd506","sha1":"67c6ce628b259c9a8c500586302d2ed9c9ea98ad","sha256":"2d036346b18bf4c27bc91f0416f8b59427e32bfc6c2724a27e6fe2e5a7b58574","sha512":"c315bb6243343e3f77e1bd49595388037d60b342630cbaa83bb70acc23c5521fbff57a793070186286d23edbd6ef22791ea2c6584455348cc126c859e123ff0d","ssdeep":"3072:pqc9xwdxU9Cppi7ekXySwEzaN2zaC7Wz99T5jOlv13B+ktDlJ:pSdxqFkAaoaC7Wz99T5yJ13B+ktDlJ","tlshash":"cb444c1df12430eb92fb2669d57f671930776966f90ac8a4f03ad09c0ca4f4a5273b6c","first_seen":"2023-03-07T15:17:10Z","last_seen":"2026-04-04T06:54:20.155524Z","times_seen":189,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/sprite/elements.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/sprite/elements.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=5496ac087ca179a9788dadb779dbc160\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4149\r\nlast-modified: Sun, 15 Aug 2021 01:07:24 GMT\r\netag: \"611868cc-1035\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 2100, 8-bit colormap, non-interlaced","md5":"be2df2724b9e7f4c7eb78bf6bc57d9e2","sha1":"5ba841b8b7cf210ada1a45d80bfb5c6d12ff2b81","sha256":"277c84697b5039a7583a843ba2e6b784354925898a15056c8d975b696d2e7c2c","sha512":"7d70cc453c294a2216da0085c0409f40caf63576cc2405c8d2ab454661a0fa9ccd387ae74b666e7978630a76f297dd06abeb459f7b0b62de65e6ee71415d2b79","ssdeep":"48:y5lEa55E1xC3KktoOB3BrJ1UQ35/3+45y0x8mOe6Oel6P6zJCytNdqROOUOK8kQb:Ewq3H5Vy+t5BelOItNdWOO1k4s76vZ7","tlshash":"45813b50a6b04d49dae742315197877c26237c03c934d0fcb874f0e735bf0a99aa1649","first_seen":"2023-05-02T18:46:33Z","last_seen":"2026-04-04T06:54:20.157813Z","times_seen":202,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/horse-324x400.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/horse-324x400.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36952\r\nlast-modified: Fri, 16 Sep 2022 05:25:36 GMT\r\netag: \"632408d0-9058\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36952,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 324x400, components 3","md5":"bf3bf3484c9b1c437800c2f639d76dc6","sha1":"2d89a53818ccbfa919d3a57555eaa343549a57f1","sha256":"67a7f143e34839ae302e0384f2fe2f73a2323e7b2023452943c3f169d09db2a0","sha512":"391dbd20ae1b5b9c7e1ad95cd097567125e8f499d788c6482df701c027d3515ca95f0d3115e9ec5f83ccd723a02279eb2abab2eb406c2106446004831d55df5e","ssdeep":"768:DsFVGpiGe0aTNosIBCaxDuLQDR5WlBM3whwp7RKe+aOhEqrCxdXX:Ds0il0aTNU9DuMDR52/GAFEoAdXX","tlshash":"6ff2f13b2ae349b74d2ddd62dfcb7129cebe81954a28edc6cd35e5541b972c0160c02d","first_seen":"2026-04-04T06:54:20.15874Z","last_seen":"2026-04-04T06:54:20.15874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/newspaper-rec728.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/newspaper-rec728.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14298\r\nlast-modified: Fri, 16 Sep 2022 05:29:08 GMT\r\netag: \"632409a4-37da\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 728x90, components 3","md5":"157d6ec791e95db88da37069c2270a15","sha1":"7f7a10158c1b28ffa76f301acba965394fb9d142","sha256":"295877512c0e2f157bcd52c90fa6f854ad6353826ba27b0b933832e0fe720b8b","sha512":"1655413bfaa3c5eb5eb78a0cc5d4582ea19a10f0bb35fd8fd2fbbcf54035a8d7fcfcb075f4132bf1bde811bd25a9909f30c6c99b645ef106067bdccb6ecd7a5a","ssdeep":"384:AmbITRE+zm/M8sbbm89wkZi4XeViT7zJb7:AvTR9nm8akg4XekTvJb7","tlshash":"e352df057e6aa168db4e0be9bb044b743f043b87e52ac49f3644a114fba01d10ba0ea9","first_seen":"2023-05-13T03:43:57Z","last_seen":"2026-04-04T06:54:20.161148Z","times_seen":74,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/cropped-lg1-192x192.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/cropped-lg1-192x192.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10408\r\nlast-modified: Fri, 16 Sep 2022 05:28:21 GMT\r\netag: \"63240975-28a8\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9e28c547ddc12b39c62338c74f119511","sha1":"6e51b586ade8f0f99b7cae85279aa0db8d17b584","sha256":"36932eb2618d93def8897203576c9401602eb5d7262307bb58be9bc852b46ebf","sha512":"8ef7d0356a982d5bba92e9d222d6d1352d9f366c9e5783d504a6f656212848d1e5350211167df288b887bf0dd6ca9a8ea4022ef34f86aec9903f5cda73b150cb","ssdeep":"192:9McQtIskMJNl+MCCN3AqXUh4nZh19hMUTvjmEJTRlftfbJvJ8hA4:/aku+5C2qXUh4nZh1FTvC2T5dvGv","tlshash":"7e229f00f29bd56ef3911cb8bf899d68abb9fc0fc6051b1442e45e5557c444ec86ed2c","first_seen":"2026-04-04T06:54:20.16216Z","last_seen":"2026-04-04T06:54:20.16216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_324x400.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_324x400.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 16425\r\nlast-modified: Sun, 15 Aug 2021 01:07:24 GMT\r\netag: \"611868cc-4029\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 324 x 400, 8-bit colormap, non-interlaced","md5":"7efc3412607bdbd11fcb1b4e5935cec5","sha1":"b34c17fe3ed4f758f968d7744558b4f8d2cffadd","sha256":"ac87416ed845ff96e8e61de3f5b75ba38d4987fc0648f48d9b43f9f4f2c1380e","sha512":"723c23418994df213f3d85d050aa690160bd73320a2160b8d5db86fd6588f45be2dce9e85442ddd834937eade1523ecb29a943eef6a860ef70c5a13e0c47a216","ssdeep":"96:YS1S8kEWmMxNE7sc50VXnvfnvfvH/vH5r:YS1nk6y7nnnnn9","tlshash":"e372b674fef0b111e549e9321cd524468c230ec3dac19d84bade4d696f00bea4c4f29b","first_seen":"2023-05-01T05:57:04Z","last_seen":"2026-04-04T06:54:20.164426Z","times_seen":83,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T06:53:45.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cache-enabled: True\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlink: \u003chttps://wbmblog.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://wbmblog.com/wp-json/wp/v2/pages/324\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://wbmblog.com/\u003e; rel=shortlink\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"All in One SEO:4.9.5.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.174.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"All in One SEO Pack:4.9.5.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":754329,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8909), with CRLF, LF line terminators","md5":"a53efc5d45f1af0dbaafd8c59666bb7a","sha1":"ea11caba2ceacb2d438215cc35a7945a7c6d072d","sha256":"135b97b64713cd128bca3e87f42957078b767533eb41050f33bbd1b5a54a6762","sha512":"72f72a7b98b6dfd4f7bf7f97b782b177b57e57a0adea0a74a319ac55dd0a24d9bc9584f74dd6c59cb4529138ecc34dcc8bfd57f6738a898cb3dd8b8b36cf9407","ssdeep":"3072:ZND6jlrR624ULG+H+ae8+l5l+z+0+oIQ9a/uRqC:ZNDE62VLG+H+/8+l5l+z+0+Li","tlshash":"59f4b6267d38282b657b0398b5b0a734efdda097e3c94d90f49cee804fe9901c793656","first_seen":"2026-04-04T06:54:20.165477Z","last_seen":"2026-04-04T06:54:20.165477Z","times_seen":1,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":335,"dns":32,"connect":96,"send":0,"wait":190,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=9214a050dc0a6c6eeaa5c1aa35f9cfe3","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=9214a050dc0a6c6eeaa5c1aa35f9cfe3 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Aug 2021 01:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61186a50-b2ccc\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":732364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"32872b624f07035c3a88a86a5baf62c6","sha1":"d91d523484aad1d9508e889a7684649560519c99","sha256":"7a89d23287ae3c749a356c76da7ef88c34d0ed018c049701b05304c3f6601ab7","sha512":"5d4ddcfbdf4f4441043ca3a32013333b415723954d08212e9dd5ef5b3644422a9be0b38add0bbf1247e417737864561f94e47dc298c19325cb7fbaff15ff911f","ssdeep":"12288:5cyCh4vxc7gqNlZETWuDZlGtT12RsXE/1znZ3b9Es056iUIDgTgQjSppA39qvuNI:E","tlshash":"7af4ee655df2758ea116e0a5e4aa3405fb1f7403a78e8ed1f59522ecdfc82c1c87c38a","first_seen":"2023-04-09T09:37:40Z","last_seen":"2026-04-04T06:54:20.167704Z","times_seen":547,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=5496ac087ca179a9788dadb779dbc160","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=5496ac087ca179a9788dadb779dbc160 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Aug 2021 01:07:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611868d4-91a4\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37284,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37284), with no line terminators","md5":"b8fdc78e2cf11d2d83c09052d26460e6","sha1":"95957acafbd2ad4aca91c4406de0b619458df62b","sha256":"d227e31ec93027f2b903fe5011b6ef0d67fd1fd8e0105843a2f56626e74f4322","sha512":"aaad144f4897ad560d4a50334e5aeb9bc07f299b48de6d327a0e7815d1ca19b89088c5e7afa613473ed882d32ac04695f6712509ba49274a04955ff03ff37041","ssdeep":"768:JZgZ5w96n25Cz4L69UBSgZ5w96n25Cz4L69UBfgZ5w96n25Cz4L69UBC/B66:XgZ5w96n25Cz4L69UBSgZ5w96n25Cz4c","tlshash":"39f2005061b032ac927b432bd1cb7d19772eb241ebd708daf7e1296f89c715981bd30a","first_seen":"2023-04-08T15:45:11Z","last_seen":"2026-04-04T06:54:20.168661Z","times_seen":481,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Aug 2021 01:07:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611868ec-1428\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6e98296229ffa777101f2ef59ae5f7c5","sha1":"cb53e2d6108ffbbbc4a96307eefa1ed6b3a4a4d8","sha256":"0dd95d9bfc689b8862a9dd8ae8166ca21df149fb24f3d0830423b66ae00d426e","sha512":"abc58d37c06ff508758ddd4534356897c5f11b8424ef5ce8fee8397f47e9d36190efaf30ae251c63f5d4cbcf668a5935eb1f031f6e358a145a5d05b64fee8c93","ssdeep":"96:PizHaI2ANSBmnDZdGSXHD5h504TLFjWMG1:Pi1EmnD/GujtljWMG1","tlshash":"14b195656948a65ef312112e81bff21a1ca4fd77fc03841897acc4e8cbb0b0e5e5566e","first_seen":"2023-03-07T15:00:57Z","last_seen":"2026-04-04T06:54:20.169535Z","times_seen":285,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbm.com.pk/","fqdn":"wbm.com.pk","domain":"wbm.com.pk","tld":"com.pk"},"ip":{"addr":"23.227.38.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbm.com.pk","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 13:17:33 GMT","end":"Thu, 25 Jun 2026 13:17:32 GMT"},"fingerprint":{"sha1":"F0:20:5F:57:F2:0E:F1:C2:BB:7E:FB:34:60:70:7D:24:31:C4:90:BE","sha256":"B6:4E:0C:3E:03:D1:64:24:C3:AC:5C:C2:FA:CD:07:C9:0E:22:25:91:53:16:0F:BC:99:11:B0:31:22:8E:68:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wbm.com.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wbmblog.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77049\r\ncf-ray: 9e6e65db381b1525-OSL\r\netag: \"page_cache:60508831962:IndexController:4bb8add758c82555ca949854c7ad3d41\"\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com\u003e; rel=\"preconnect\", \u003chttps://cdn.shopify.com\u003e; rel=\"preconnect\"; crossorigin\r\nset-cookie: localization=PK; path=/; expires=Sun, 04 Apr 2027 06:53:46 GMT\n_shopify_y=b73d5c94-296b-4f6d-824e-4e4f58926b35; domain=wbm.com.pk; path=/; expires=Sun, 04 Apr 2027 12:53:46 GMT; SameSite=Lax\n_shopify_s=092be742-c5d8-414c-909f-22bb56e31377; domain=wbm.com.pk; path=/; expires=Sat, 04 Apr 2026 07:23:46 GMT; SameSite=Lax\n_shopify_essential=:AZ1XROU_AAEA-ONFPopNU_UYZXW5OzfxHihnEmMN2Yjw47mrIR8XG_lZuk_CoRg-bMva9vHm4r_0rLXqtQFo-AEu2z86TVqC9AJJnoEoidickDNWyAql67WPZ8tauBe-Npq8Vd-18QRGHyIKfe1bruOf8kOcIz_jYFKXKAlAMcTZZRraZqNnmr38fv55IaC-4nJanpMrkdkNIz-SnyKMFWCFB-ozwWllGwuJ9O_CfIO95XDNOPmtS_ub7EF-GHy_FmfAs2GKGXQKyvgSv8kzNc5i7vJyptpVa_VuRlQyF2LY_LfRpKe4_6ZYg00j5UUig8ahjewWaihOkUJPIza5gnuzTTCBYagoE6QFWka8oWsrbAl3A_AdzOXnYtKFyi-uVJlOAjGUt8uJoi-zsAozsGz_J2oAFUVu6wkkJXuYAdbJdX4ebNLa4EG_W6in1sGKjw:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\n_shopify_analytics=:AZ1XROVeAAEAEEHid8S4OI70sdbMYspOKIoIk8ITfC6hO73TVZM63U_yHejZc1tIC34UFAasVCMokwIrOOcKnZozxt1ytU5HyhRWUqUz4fAe8MG4NpuCucIoSPmvNvPKhlFhyilwNXongUfI9yfcdvjc_bDjZPT1RhTsvXSzp3W9Dw:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\n_shopify_marketing=:AZ1XROVeAAEA8YsXOSEE0hpQxQkFsFqYcBnnwMluWAPqIkFKD9fmBhRz6lUDmxBSrw9vGIYPt8wVxv6TyL1679JE2ObxlHJ-6vJHKtKDUJylbXXOwHTDw4fpOul1t2CYeBbV:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nshopify-complexity-score: 0\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=7889238\r\nvary: Accept, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-language: en-PK\r\npowered-by: Shopify\r\nserver-timing: processing;dur=48;desc=\"gc:4\", db;dur=13, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", theme;desc=\"158309417178\", pageType;desc=\"index\", servedBy;desc=\"984h\", requestID;desc=\"5180062a-14ac-4bd1-9582-cba8b7d7d34d-1775285626\", _y;desc=\"b73d5c94-296b-4f6d-824e-4e4f58926b35\", _s;desc=\"092be742-c5d8-414c-909f-22bb56e31377\", _cmp;desc=\"3.AMPS_NO03_f_f_JjwGDG8FQtaicQS2y-dTgw\", compressionLevel;desc=\"5\", cfRequestDuration;dur=129.999876\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-request-id: 5180062a-14ac-4bd1-9582-cba8b7d7d34d-1775285626\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aWMGTCPVgZdBIrDRl5HFhgrbPJpddcBjyVnHbaa1A4OiG5KvpUmLd7XKCnhMw50YyFL6541ETmLN7a1GRTFfXTi9utd%2FdCfC5VbYgLKCjWKbpWki8WGUOjlQpT8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nx-download-options: noopen\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":48,"dns":28,"connect":1,"send":0,"wait":133,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/horse-218x150.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:48.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/horse-218x150.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13865\r\nlast-modified: Fri, 16 Sep 2022 05:25:19 GMT\r\netag: \"632408bf-3629\"\r\nexpires: Sun, 04 Apr 2027 06:53:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 218x150, components 3","md5":"907705597a3c06727ecda2007add1cc6","sha1":"063f6f15e4684fb016c9692458db7a704fe51c1a","sha256":"f2cd7cad0c4061486bd87f38763ae1f78874225611c3aa42410ac5029b86cd7f","sha512":"fc4ce856e36dd558adede5b6702d776da6a7421774426be5d5cb559c74abbdfe4c797e413d89b941a2248f6f78912af59f58ade009c63f5a54792dd3578c5a37","ssdeep":"384:zizrZOGT4VQxgbF9T6QNcR5rAMA5G7O+z0Fl9aRM22SC:zmZfgbF9TviTPAmREl9aQ","tlshash":"b752d096ed5c83287ea58e2ace9d46174b08b35e0bb4073a7970e236d3458e44f27d30","first_seen":"2026-04-04T06:54:20.17041Z","last_seen":"2026-04-04T06:54:20.17041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"four.startperfectsolutions.com/scripts/sold.js","fqdn":"four.startperfectsolutions.com","domain":"startperfectsolutions.com","tld":"com"},"ip":{"addr":"159.65.80.89","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.startperfectsolutions.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:57:44 GMT","end":"Sun, 14 Jun 2026 02:57:43 GMT"},"fingerprint":{"sha1":"7C:4B:62:12:F3:F2:18:6C:50:DC:72:AA:22:4D:F1:B9:53:BB:05:3B","sha256":"F3:32:50:38:7A:24:77:13:C2:FC:94:37:25:5D:B3:7A:8F:4D:8D:8C:B7:BC:95:9C:D9:8F:E2:2C:90:4D:4D:21"}}},"request":{"raw":"GET /scripts/sold.js HTTP/1.1\r\nHost: four.startperfectsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4941\r\netag: W/\"134d-ibJdWSz+7P/F/LqDvmTAAh2igd4\"\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4941,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"530a3e5c35f1fc5032e6da4e418b5bf1","sha1":"89b25d592cfeecffc5fcba83be64c0021da281de","sha256":"1eeeb55073f0f035b4d71a14a11dd305c8aeb98d6095e0172ce2b9f8ea405a8b","sha512":"fbfd58d761f84b8f7c0367bcbf62718d77836624639f78482325b0c55e73d7ac57e2bd112632ceeec7d4a0767e1410d59a4380db2ea84c54b86e261b0c5f730f","ssdeep":"96:WulvicF73FSCzSR3IT5l6tRs1W06oOkRqSWD:WSvz73FSCzS9A6tRs1W06ofRqSWD","tlshash":"43a1305d28e22025450739f9cbaf4118f935530b265e8c907d2d6a44af7633d8bf2bed","first_seen":"2026-04-04T06:54:20.172801Z","last_seen":"2026-04-04T06:54:20.172801Z","times_seen":1,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":63,"dns":19,"connect":24,"send":0,"wait":24,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"four.startperfectsolutions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"four.startperfectsolutions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 02 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160568\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T09:42:51.282278Z","times_seen":61928,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_696x0.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_696x0.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 16615\r\nlast-modified: Sun, 15 Aug 2021 01:07:24 GMT\r\netag: \"611868cc-40e7\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 696 x 436, 8-bit colormap, non-interlaced","md5":"f1576643e13766d49cde0fdd7d919bd8","sha1":"38eb347fdf29b050b7fb5c772c3e7e045ac50004","sha256":"de2074e0188c7ad53f5a8261e76b75a29ddf08b5aa1b4b3e62617e7bbb83bdca","sha512":"748a0b620f963936dc5aad7abf87b260bf53b12acc514fdb73ce048968b3f509345a87bc6ee57444325af3c598deb009d74313d62b26aa68148f2b0aabb0109d","ssdeep":"96:gS1S8kEWmHkZxNE7sc5TinvfnvfvH/vHY5r:gS1nk6Hk7Jnnnnner","tlshash":"9972a3b0fef0b5a1e9ca95322dd214464c371583e9c18dc9b6ce4c6aaf10bea4c5f257","first_seen":"2023-05-03T03:00:48Z","last_seen":"2026-04-04T06:54:20.17595Z","times_seen":233,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_485x360.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:48.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_485x360.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 220\r\nlast-modified: Sun, 15 Aug 2021 01:07:24 GMT\r\netag: \"611868cc-dc\"\r\nexpires: Sun, 04 Apr 2027 06:53:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 485 x 360, 1-bit colormap, non-interlaced","md5":"76b8f04ecd92fb64be29a72f5e185cb3","sha1":"30248a56d870635f468263931b6e4bc4b858f0a1","sha256":"e083a66612fc7d25b62617679a60dc5a790f38cb2e48fc0127d64ede4d13de25","sha512":"6cfc633cf5cf698ccf5c2f5ebe80d34852e6efeaa6d88bf8137dfb6303de8f7e9ed52d50890886f43bbe1c2a9f7a1a9968c94949f0853b55e4859df490a39688","ssdeep":"","tlshash":"ecd022d67595dc3ce766a67b022332a28812f22c040a6fc300a3e8a1aff98889484352","first_seen":"2023-05-16T22:22:56Z","last_seen":"2026-04-04T06:54:20.180255Z","times_seen":48,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/themes/Newspaper/style.css?ver=11.2","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/themes/Newspaper/style.css?ver=11.2 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jul 2021 18:12:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6102efaa-24643\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149059,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (378)","md5":"f27de1cc3317dc2b03710cde62d33bb8","sha1":"904e819189767910b43d2bb88c65053078e66dfd","sha256":"5f83fb4110de9c1673946e280175f20c0e3a4a6d3c8848274a2f12e702797355","sha512":"220f2716e7f917d16766facbe26da88c41889ec689ae6eaa54f362c9ce8097be2f4252e3f7c8e7d15b797b6f0c44cd9831745a0ba670ff047a5a61d983195d57","ssdeep":"1536:tIcQnvLQDxvoelrLV9Tzsi6/9MXRmBO0W+4kxjfHyCE7zeT74ZztXvW4wNNqQu1R:O3Uxge1Bwv4xtXgNAQu1+1pRmdWPn89l","tlshash":"afe371a25ff225446217e1b4a19a7621f35d1002db4fdee8eae1605cdfc9b90c4be38d","first_seen":"2023-04-12T00:40:02Z","last_seen":"2026-04-04T06:54:20.181592Z","times_seen":105,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0C54D4M78Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=G-0C54D4M78Y HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\nexpires: Sat, 04 Apr 2026 06:53:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138947\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"204a6e6f7a1276bfd6bdf554b2866f8e","sha1":"757bb1a9c6609abc155983236f92551024f34dc8","sha256":"4d1fae2a11656a0f46eaf815bb28b2cbf8f8dbf1bbff2eeda86b29e6e46d2e94","sha512":"b03a0a1edd0bb4ef03ef66d69925f2ba58bd3e9097d7602d9a06d72bb52f2086e80d93b4e42427ba93a045dfe591c5ad5a101d5483fd02ece7731ba564fda447","ssdeep":"6144:93eqQGrLr8DP9aGb/F8x/OW+/5EiWH1joHeLlbzx:7rH8IGbt87jn","tlshash":"368409cdb3d6746643a3b478903f008ba17a69e2f84cc899f185c8d42e74a994277f7d","first_seen":"2026-04-04T06:54:20.182579Z","last_seen":"2026-04-04T06:54:20.182579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":65,"dns":0,"connect":8,"send":0,"wait":30,"receive":28,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 18:12:07 GMT\r\nexpires: Sat, 03 Apr 2027 18:12:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 45699\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T09:44:11.946405Z","times_seen":198896,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":180,"dns":1,"connect":15,"send":0,"wait":16,"receive":5,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Aug 2023 08:50:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d5f63a-3509\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T09:40:09.023556Z","times_seen":638437,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Apr 2025 19:40:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680007ba-49d9\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-04T09:38:23.552819Z","times_seen":89640,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 18:12:07 GMT\r\nexpires: Sat, 03 Apr 2027 18:12:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 45699\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T09:44:11.946405Z","times_seen":198896,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/themes/Newspaper/images/icons/newspaper.woff?19","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?19 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/wp-content/themes/Newspaper/style.css?ver=11.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24864\r\nlast-modified: Thu, 29 Jul 2021 18:12:56 GMT\r\netag: \"6102efa8-6120\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24864,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24864, version 0.0","md5":"b527d8ce3f034285f69b410d6ac6e58b","sha1":"80c79fe969594d2f4c57027650872fdd7bba491d","sha256":"ea9ad8f6ace011a694d664482cc6ca0acc2dd86a8d6b684154327ec84c0c95fd","sha512":"95b9bcb93b8b10a967c5046d2a8398033247ff34871386eca000c3d2836c6c7111ba2094cba1bbbc85715aa20f75e0e48098a844dcc95b550316bb752dac5f1b","ssdeep":"384:xOBgoNZBWPpk/V6aPTYT7TAz3sEcYxLFDXM/Wb9tMod0/zAPwth533uE53abRnVY:wKoNTMeVBTY7TeD8/s/0LLx8ml/","tlshash":"1ab25a07cbfdde5ac9299bb54c6293154af6e208ef289b62f9c70ddcc4458e04c5e325","first_seen":"2023-04-12T00:40:02Z","last_seen":"2026-04-04T06:54:20.186587Z","times_seen":653,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%2C300%7CRoboto%3A400%2C500%2C700%2C300\u0026display=swap\u0026ver=11.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:54 GMT","end":"Mon, 08 Jun 2026 08:38:53 GMT"},"fingerprint":{"sha1":"B7:E6:53:75:FA:B8:E8:B5:11:AC:F7:22:E0:8B:AC:53:3E:61:05:64","sha256":"46:48:37:84:82:72:61:A1:32:78:58:13:38:99:8D:2A:19:CB:C4:47:8B:BC:B1:AC:5F:6C:F4:91:6D:BB:DE:BB"}}},"request":{"raw":"GET /css?family=Open+Sans%3A400%2C600%2C700%2C300%7CRoboto%3A400%2C500%2C700%2C300\u0026display=swap\u0026ver=11.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 06:53:46 GMT\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46396,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2b51d21126808e17a71839b67b449cd1","sha1":"fc222505c37b44eb30abea650e0af82fa966b3bc","sha256":"731584c6f9b473380dd6fd94d83dee27844c9a04cb850f9db00a41da9e6ce8ab","sha512":"106b582e56051a4c7010a984e5d6149bd9cd4b5fa0f7150f0a2498866b80961e3cd40b376b64836dee6fad6e3ef750d0299703d000502c8f0476c9f5476c482b","ssdeep":"768:l+6hFzFCODS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKy8:lVXRLyll3","tlshash":"25230aa0041714009b434ce223cebf35fe1f92616044d0baabfd9b9baedbd66527835d","first_seen":"2026-02-24T20:06:08.210581Z","last_seen":"2026-04-04T06:54:20.187533Z","times_seen":16,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":190,"dns":1,"connect":28,"send":0,"wait":49,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Nov 2023 22:23:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654c0a4d-15601\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T09:40:44.628337Z","times_seen":684998,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/bd6393c6-bb68-43eb-81a4-a8fe6c3bd2f1.__CR00970600_PT0_SX970_V1___-300x186.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/bd6393c6-bb68-43eb-81a4-a8fe6c3bd2f1.__CR00970600_PT0_SX970_V1___-300x186.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12081\r\nlast-modified: Fri, 16 Sep 2022 05:28:03 GMT\r\netag: \"63240963-2f31\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x186, components 3","md5":"d7e05585a575cb482ee3d7fa9c14a3cd","sha1":"c72d805805eb7ed8c72f551e9ed66d55fa40dbcb","sha256":"1a2cb0316ffe1602dab056c6d140357e8eff18209094899e35a2fcf198d42f0c","sha512":"2a1a4c6c083f8f8c58b82d8c4be1e06434adbf43a11884e6e407b2553819f9faa337b557e7cbf443b9a4e19af459dc59f6b66f482815efaf739f79c2ecf8a1ef","ssdeep":"192:/OSqghyRwp1/zPYJsU4XTz8xsljz8oIW3mDqKZg9VpQz0x2ndMFESAuZU:W20RUzgJeXExsaeh6UsvSAuZU","tlshash":"7e42bfb5e30c46d7597a4fd049072ced8eb5163126e5338d2e76ee8ded950c216481f2","first_seen":"2026-04-04T06:54:20.191024Z","last_seen":"2026-04-04T06:54:20.191024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/gluten-free-ramazan-package-324x400.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/gluten-free-ramazan-package-324x400.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36568\r\nlast-modified: Fri, 16 Sep 2022 05:25:16 GMT\r\netag: \"632408bc-8ed8\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36568,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 324x400, components 3","md5":"fb356b211a33d231acd87b4ee37ff2f9","sha1":"cbd1343eb9e1c72fd4d02264616c0bd465b99e04","sha256":"f308438ec13bb9662015546732fa753419d2c4e307edf5280ae0da122dc3ca21","sha512":"ed0a02d9439199b520d531797eeba8c76a7f6ab3e407f984c03101a947fc78be50143ed0dd95dd586da0550eb3ac80fbe086f21fc99578b31d444f91b99dbf37","ssdeep":"768:DbNzvxgnuHK9jd5WjexexeiPfH/PKIxRYfRvFrfgnBckk3jA2RonkwvEgBK6rdN5:DbNGnXajexexeiP3PbYfUWk4M26kMEgN","tlshash":"36f2e1f930914fc1a71fac16cc8f194b1762e95b22c6e951923bef5b73a21c18d6e06c","first_seen":"2026-04-04T06:54:20.194122Z","last_seen":"2026-04-04T06:54:20.194122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=5496ac087ca179a9788dadb779dbc160","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=5496ac087ca179a9788dadb779dbc160 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Aug 2021 01:07:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611868cc-26bd7\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ca4680655b9e384d021c88b206f07528","sha1":"8e7988366fce3ae8f1fe9a43e20e81c5f4041a91","sha256":"bf77065b0e4b52c6ee71566850b3e6a1ecdfd6331427c5063a1116e347b85203","sha512":"1676c59f0a8c1404afbd3d7655c9ee5372b69adbb62f19348bd84feb725f0431b94917b76fa2f88fb8fa0f2091fc105bc9a95dec90049b6b6b65ae9c7c4e1f64","ssdeep":"1536:0Mzq0k+goER47LwPtQU26NS51ybkeliDcSsv+C5PJmZiCVL87A4WWxMFRg0jaP2m:77LwSU26mgkeliDhRLt0","tlshash":"cbf373a59ef239056427d178a09a2224f72fb013974fdee9f7e1614ccfc5a84c1ae349","first_seen":"2023-04-08T15:45:11Z","last_seen":"2026-04-04T06:54:20.197104Z","times_seen":203,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/np10blue-white-retina.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/np10blue-white-retina.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 6855\r\nlast-modified: Fri, 16 Sep 2022 05:28:10 GMT\r\netag: \"6324096a-1ac7\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"d8247741ab82fc34b855d67f8eccdbe3","sha1":"206328e2381cc115989eb64795bda61dd026f37e","sha256":"06f5894c051efa540e2d98f9d7b2909c00fda21d7f70c59dad216c812ea4eba8","sha512":"3ebc41fe82c599d19b6b8f49e11c031df9e1ad6b4097f9ea74548c2cc36dbc3c2d231dad604bd004b4b8be41f9bc8ad13e23e4ecd391921de108132ec2655c62","ssdeep":"96:kSeemqaZt962gtt8WkY4KgdWP+MX9ZW+CPNgqMZ2aIpYJVw3WnEPGQjXvAej+ymA:bTuZi38XPKpW+AbkJJG3WEPjj4iL","tlshash":"68e19e88acc699523731786b4e57543ddfa10870474a737a759ff683939b83380a28eb","first_seen":"2026-04-04T06:54:20.19815Z","last_seen":"2026-04-04T06:54:20.19815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/plugins/td-subscription/assets/js/frontend/tdsLeads.js?ver=18da952bde8fab1875ba66b9c5072e53","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/plugins/td-subscription/assets/js/frontend/tdsLeads.js?ver=18da952bde8fab1875ba66b9c5072e53 HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Aug 2021 01:13:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61186a4a-13b5\"\r\nexpires: Sun, 04 Apr 2027 06:53:46 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"59ea669c4fd56e1df2837732c6664b73","sha1":"990b6c99380f39a23dde906aa2cda4130eaae44c","sha256":"0dca9aebd44a0d703986efe180554294687479465a34250979df778be1597350","sha512":"f3e8cb4b6b30e18f2b369dac6c6b39a27d261b1fc07dba3e24ee4dd32a152d74c504a42a7727061ca4de3bc399335cfa4779889763bff1050817ad41e43664ca","ssdeep":"96:381hWJRHEBt8n5+1MQMH5dUjX8Qqf4b7vCDeiBh:SAH5ujI4v2eo","tlshash":"28a1cf8d59a711a78831333a6f2a3018e774143bc702de547e8f52692f754a803b2fee","first_seen":"2023-03-10T22:12:07Z","last_seen":"2026-04-04T06:54:20.20101Z","times_seen":33,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 02 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160568\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T09:42:51.282278Z","times_seen":61928,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":83,"dns":4,"connect":28,"send":0,"wait":29,"receive":11,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 02 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160568\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T09:42:51.282278Z","times_seen":61928,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":79,"dns":1,"connect":27,"send":0,"wait":29,"receive":9,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/08/cropped-lg1-32x32.png","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/cropped-lg1-32x32.png HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1056\r\nlast-modified: Fri, 16 Sep 2022 05:29:26 GMT\r\netag: \"632409b6-420\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d21d647aef088666df06c7054b735510","sha1":"fb92e59f1923b4dfdf0d96efc56a18aa27675a2c","sha256":"f97ac754d7a176401200ab0baae3cceb6598e81233987c9c75a2e74c8180c1c4","sha512":"7f0459fbc356c81510116b8ce6d97140637334b018b5bdb40e5431b9c1248438cd0d4bda89f3812cb2ad822be383959d4a41ad56c93f8ce27c22c71a66b6c221","ssdeep":"","tlshash":"fb11e55ba9b67422d3f391f7c8875424c0338def5807064203b48ca338f0e626ae9290","first_seen":"2026-04-04T06:54:20.202112Z","last_seen":"2026-04-04T06:54:20.202112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/ramazan-package-1-324x400.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/ramazan-package-1-324x400.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36564\r\nlast-modified: Fri, 16 Sep 2022 05:25:22 GMT\r\netag: \"632408c2-8ed4\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 324x400, components 3","md5":"c06f43c4c97df4a697891f8a3880c25d","sha1":"ba8169da06db77585df54253a79df7ea84ae5fc3","sha256":"548267295346f3138c3b52cfbcab0b54ac9c94f1ce3ffd7146c9a8293b4db233","sha512":"0b04d1553f0e730a39efc32eb94ebcf3018a6e64db210a4101e49f83b30d4e2f930651b0a79bae72a1cc27ed2cc04ad0b3f60ac1be4910fe18c16baa22c97568","ssdeep":"768:DDvk3Co9f3mdxYHHxgb/SsYssjOVyuoo5NSjpsxzwHtkoKOw:DDvkT3mTYo/SsYpCgN2zwq7Ow","tlshash":"3ef2f10fa73e8d66d4346e5a4a5c971466c635d360857a987b3cc2e8c5e0cc7e76b00b","first_seen":"2026-04-04T06:54:20.204511Z","last_seen":"2026-04-04T06:54:20.204511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2021/10/Beauty-Main-Banner-324x400.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:47.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/Beauty-Main-Banner-324x400.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26482\r\nlast-modified: Fri, 16 Sep 2022 05:29:38 GMT\r\netag: \"632409c2-6772\"\r\nexpires: Sun, 04 Apr 2027 06:53:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26482,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 324x400, components 3","md5":"f63501959c2a94aa99bcb276c5a3c826","sha1":"d391ece954a1306d9af85c73cd7c9657089aa05b","sha256":"647cd7b507baf6ace06f3340ea2a6a90325e2a93444279cd496ab0c3c5b5a45a","sha512":"d32c2f3863f5ff11ac46c9e9e9f15d84f423f088a45d14792d381145ef81d96a2d4e1cc8d9a748bd6b4d587b11f47ad2a5c079ed4db72e6c31933a6e35523337","ssdeep":"768:Dkd2Bo4WTZxuRdgVTPJvkUmBojcBsaOGku:DksB+Z15kUhh9u","tlshash":"44c2e1eb4b240a9accf5dd98cc74563a7237cb3a9c6896015fb1cd1f49d26e8c409b63","first_seen":"2026-04-04T06:54:20.206805Z","last_seen":"2026-04-04T06:54:20.206805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/gluten-free-ramazan-package-218x150.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:48.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/gluten-free-ramazan-package-218x150.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13818\r\nlast-modified: Fri, 16 Sep 2022 05:25:31 GMT\r\netag: \"632408cb-35fa\"\r\nexpires: Sun, 04 Apr 2027 06:53:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 218x150, components 3","md5":"07280c96635fdcfdc61e40b4202b31d5","sha1":"3b8914c6a513d5a3c5375197eb3ff9af941829e0","sha256":"b80ba7f85e9398ecaa814d6ed1629ddd6d3400afa0e87eec94c1c8c82263062c","sha512":"438f56673e61435fd2706edb9a2d7b985f89b808271cbf6a925c2e99da9c2bc4cdcb17b50047ca033d85102273ddf5370989a361d8eb40d164e5437cc2a9e5cc","ssdeep":"384:zqegMb0SB7VvWfgY9nWJuDCaqPzHVgxrkxgER9T6EczR:zqodT47DCHErmx9T6P","tlshash":"f152c042e86785008612ac732644c35e97e67cb39a281bcb643fdc67b7b53e22309f42","first_seen":"2026-04-04T06:54:20.209129Z","last_seen":"2026-04-04T06:54:20.209129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"four.startperfectsolutions.com/index.php","fqdn":"four.startperfectsolutions.com","domain":"startperfectsolutions.com","tld":"com"},"ip":{"addr":"159.65.80.89","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:48.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.startperfectsolutions.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:57:44 GMT","end":"Sun, 14 Jun 2026 02:57:43 GMT"},"fingerprint":{"sha1":"7C:4B:62:12:F3:F2:18:6C:50:DC:72:AA:22:4D:F1:B9:53:BB:05:3B","sha256":"F3:32:50:38:7A:24:77:13:C2:FC:94:37:25:5D:B3:7A:8F:4D:8D:8C:B7:BC:95:9C:D9:8F:E2:2C:90:4D:4D:21"}}},"request":{"raw":"POST /index.php HTTP/1.1\r\nHost: four.startperfectsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 185\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":185,"data":"vhref=https%3A%2F%2Fwbmblog.com%2F\u0026juh=1cdd78b7faaa20dc888fc1cc3b4e6683\u0026cs=51a5e6bcfa1939d4218f3d8fc1e7fc99\u0026ex=1775286226096\u0026v=f3612488-17a3-4f46-a6a3-8de95be8ae53\u0026pi=false\u0026t=1775285628"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ndate: Sat, 04 Apr 2026 06:53:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T09:46:04.42214Z","times_seen":553628,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":53,"dns":1,"connect":22,"send":0,"wait":284,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"four.startperfectsolutions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"four.startperfectsolutions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:46.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wbmblog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 02 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160568\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T09:42:51.282278Z","times_seen":61928,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":92,"dns":1,"connect":16,"send":0,"wait":16,"receive":20,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wbmblog.com/wp-content/uploads/2022/05/ramazan-package-1-218x150.jpg","fqdn":"wbmblog.com","domain":"wbmblog.com","tld":"com"},"ip":{"addr":"35.212.110.188","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wbmblog.com/","date":"2026-04-04T06:53:48.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wbmblog.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:55:39 GMT","end":"Fri, 03 Jul 2026 01:55:38 GMT"},"fingerprint":{"sha1":"24:CA:BF:02:AF:39:9D:39:93:32:18:1B:D1:CE:BF:A2:69:36:16:89","sha256":"BC:48:6D:C2:88:E6:61:88:A0:BB:01:A1:94:E6:94:9A:64:9C:90:FB:91:12:55:1C:D0:72:C4:BE:FE:FC:B2:90"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/ramazan-package-1-218x150.jpg HTTP/1.1\r\nHost: wbmblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wbmblog.com/\r\nCookie: _ga_0C54D4M78Y=GS2.1.s1775285627$o1$g0$t1775285627$j60$l0$h0; _ga=GA1.1.362069895.1775285628\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 06:53:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13795\r\nlast-modified: Fri, 16 Sep 2022 05:25:53 GMT\r\netag: \"632408e1-35e3\"\r\nexpires: Sun, 04 Apr 2027 06:53:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 218x150, components 3","md5":"a252030c01b68e4d6d054ae559da519f","sha1":"6badcd422b8e8d7c7ad4983fdc3f8badc5cbbb15","sha256":"aa9cf0712720e53717a2410aec7d7e10f1d0278497f1d28d6b91d0d32a51afa2","sha512":"117aeb501e81730235d64fee210375438e2322d2e06df5c724f179506df94951ed5b071ada7460406e53696b4dab1ceb44789978da95f5a60bf9a6ff929f9d29","ssdeep":"384:zPAmegztlM76KeJcI1MmNOyOUlqYAQh49KbHpLNTKGt:zY7gJlMeHcI1MmUyYvQhCoNGGt","tlshash":"fe52c0443853d2c1cca0cc16686ab056cc63f3f51726e4b15cb1e2beaea57d8b451f81","first_seen":"2026-04-04T06:54:20.21228Z","last_seen":"2026-04-04T06:54:20.21228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"wbmblog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}