200 OK 11 kB URL User Request GET HTTP/1.1 IP
ASN #3462 Data Communication Business Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2771), with CR, LF line terminators
Hash 987690ee8db49be2874228ff39785a2e
af035e4d88f4229614ea4f7cb88bc36fda7b5ddc
3aa6c16c74c5caae16a1570ee8f83303516133b1fb78fd91cc2bad5be4dd172b
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 11354
Connection: keep-alive
Permissions-Policy: interest-cohort=()
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3; path=/; HttpOnly
X-Content-Type-Options: nosniff
Last-Modified: Sat, 27 May 2023 23:45:11 GMT
X-Powered-By: PHP/5.3.29, PleskLin
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 May 2023 23:45:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 May 2023 23:45:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
email.sry.com.tw/media/jui/js/jquery-noconflict.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 21 B URL GET HTTP/1.1 email.sry.com.tw/media/jui/js/jquery-noconflict.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
Hash e2060c4e5e5955c824723b13a212d3ec
18420ce484978f8ba3d7371febf1638828bb7a67
5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6
GET /media/jui/js/jquery-noconflict.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 21
Connection: keep-alive
X-Content-Type-Options: nosniff
X-Accel-Version: 0.01
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
ETag: "15-5d65bb487df8c"
Accept-Ranges: bytes
X-Powered-By: PleskLin
email.sry.com.tw/media/jui/js/jquery-migrate.min.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 10 kB URL GET HTTP/1.1 email.sry.com.tw/media/jui/js/jquery-migrate.min.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/js/jquery-migrate.min.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 10056
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-2748"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/media/system/js/caption.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 491 B URL GET HTTP/1.1 email.sry.com.tw/media/system/js/caption.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
File type ASCII text, with very long lines (413)
Hash 27e0e11b572de3bc44be960d25d65570
9c431113357e1a7147388978bde9b70a3ff6114a
20f7c83ab9dfdc1e88f4c3fafc0712492200ab738fb30660526bad9dcb7282dc
Analyzer Verdict Alert fortinet Phishing
GET /media/system/js/caption.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 491
Connection: keep-alive
X-Content-Type-Options: nosniff
X-Accel-Version: 0.01
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
ETag: "1eb-5d65bb4881e0c"
Accept-Ranges: bytes
X-Powered-By: PleskLin
email.sry.com.tw/templates/protostar/js/template.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 2.1 kB URL GET HTTP/1.1 email.sry.com.tw/templates/protostar/js/template.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
Hash 2527a612185a282ca5f11d1f140a8840
9ba9ea30eb662b74c23d56e770e5137452e4e9af
7b26c692500dd71cbd9b8d7e801152aa89394511bbe0e191f79aedef0951564b
Analyzer Verdict Alert fortinet Phishing
GET /templates/protostar/js/template.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 2050
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-802"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/media/system/js/core.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 8.7 kB URL GET HTTP/1.1 email.sry.com.tw/media/system/js/core.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
File type Unicode text, UTF-8 text, with very long lines (8729)
Hash e01099c2824b8fc4a435611089253cf7
ac8338f1566be54e957c123c863a97ca8d6f3ada
98333312a99b4c67911a1c1d4bddda30653715ffa23ea460fe385fa1987b39ba
Analyzer Verdict Alert fortinet Phishing
GET /media/system/js/core.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 8735
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-221f"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/media/system/js/keepalive.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 462 B URL GET HTTP/1.1 email.sry.com.tw/media/system/js/keepalive.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
File type ASCII text, with very long lines (461)
Hash 5952c62bfa0a4f4e03ece5051c5a6938
9ee799d9d1869a05981dc217a59769e04b28f407
1df72eb0c6f570ba6c078ebea6e42747f7e11f68bcccdb8c528f85ef39d46df0
Analyzer Verdict Alert fortinet Phishing
GET /media/system/js/keepalive.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 462
Connection: keep-alive
X-Content-Type-Options: nosniff
X-Accel-Version: 0.01
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
ETag: "1ce-5d65bb4882dac"
Accept-Ranges: bytes
X-Powered-By: PleskLin
email.sry.com.tw/media/jui/js/bootstrap.min.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 29 kB URL GET HTTP/1.1 email.sry.com.tw/media/jui/js/bootstrap.min.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
File type ASCII text, with very long lines (28972)
Hash a125594de09167bd2e9015d790029a64
b0567b7e3db8ddbdc5806f5c4e2fa7a8abc9b692
b240d68de7c3795c87771f510527c201d7d67f0e065d973b16bf86855932f9a2
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/js/bootstrap.min.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:12 GMT
Content-Type: application/javascript
Content-Length: 29126
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-71c6"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/media/jui/js/jquery.min.js?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 98 kB URL GET HTTP/1.1 email.sry.com.tw/media/jui/js/jquery.min.js?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
File type ASCII text, with very long lines (65462)
Hash 48a197817927a6eda6f531064f1dba71
5ba19dcca2e2d7ac659af0fbc97dc99e505c498b
05d31c760df3e6f0c64e3da1cd299e5f73df51c974c6528a60d0685859bbc1ba
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/js/jquery.min.js?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:11 GMT
Content-Type: application/javascript
Content-Length: 97646
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-17d6e"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/templates/protostar/css/template.css?f21279d38aeb2a2e12ea2ae062d6ae30
200 OK 164 kB URL GET HTTP/1.1 email.sry.com.tw/templates/protostar/css/template.css?f21279d38aeb2a2e12ea2ae062d6ae30
IP
ASN #3462 Data Communication Business Group
Size 164 kB (164388 bytes)
Hash fafc7640337fb2e93aaf0ecbcfaccf88
9d9d97aae9eacdbadb679c7d184deda6ad622186
7cad81b7a63b27b45370ed849a487870de63c8a67f48486918471e4c7d2dc38e
GET /templates/protostar/css/template.css?f21279d38aeb2a2e12ea2ae062d6ae30 HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:11 GMT
Content-Type: text/css
Content-Length: 164388
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-28224"
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 May 2023 23:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v35/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v35/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data
Hash 8d1c44b2bf75a4e6f1bd141f9a965f4f
1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434
441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709
GET /s/opensans/v35/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://email.sry.com.tw
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18664
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 07:49:32 GMT
expires: Fri, 24 May 2024 07:49:32 GMT
cache-control: public, max-age=31536000
age: 230140
last-modified: Tue, 02 May 2023 15:19:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 May 2023 23:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
email.sry.com.tw/images/headers/blue-flower.jpg
200 OK 37 kB URL GET HTTP/1.1 email.sry.com.tw/images/headers/blue-flower.jpg
IP
ASN #3462 Data Communication Business Group
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x180, components 3\012- data
Hash 0c304f7a60d02e61ad54445899e13675
900f6fea706b7b7a11e80878fb535325fdc3eb34
784ca8df1acefa81f847938c71971e54b90c58856b42528f97b1fdb95b6a0974
GET /images/headers/blue-flower.jpg HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:13 GMT
Content-Type: image/jpeg
Content-Length: 37020
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-909c"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/media/jui/fonts/IcoMoon.woff
200 OK 25 kB URL GET HTTP/1.1 email.sry.com.tw/media/jui/fonts/IcoMoon.woff
IP
ASN #3462 Data Communication Business Group
File type Web Open Font Format, CFF, length 25424, version 1.0\012- data
Hash 910a8fd387e6c5ac62dbe014dc131960
78d797741e92a0fb3094ad076dfd0ae8f1c36713
6d362fa22342a2d22cbe8d4472d2d11a8d0864310ee2e8e48ede3148465a609d
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/fonts/IcoMoon.woff HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/templates/protostar/css/template.css?f21279d38aeb2a2e12ea2ae062d6ae30
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:13 GMT
Content-Type: application/font-woff
Content-Length: 25424
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-6350"
X-Powered-By: PleskLin
Accept-Ranges: bytes
email.sry.com.tw/templates/protostar/favicon.ico
200 OK 2.0 kB URL GET HTTP/1.1 email.sry.com.tw/templates/protostar/favicon.ico
IP
ASN #3462 Data Communication Business Group
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 1194d7d32448e1f90741a97b42af91fa
650aa3c9b17e4d83aa4857d6e9fe8e3ece935724
7bd9b59d14b126e8c5abcb1c89b60c79e2b2e17c15745fe8d385204d87c40765
GET /templates/protostar/favicon.ico HTTP/1.1
Host: email.sry.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Cookie: c020eae61a9b133188c6c33fdd505b34=l4n6opfl7o6q2l103dqeindlc3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: 100hub.com
Date: Sat, 27 May 2023 23:45:13 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 2019
Last-Modified: Mon, 24 Jan 2022 22:44:02 GMT
Connection: keep-alive
ETag: "61ef2bb2-7e3"
X-Powered-By: PleskLin
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Open+Sans
200 OK 2.9 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (2967), with no line terminators
Hash 943667d1776ef7de00d3b96830f3369c
dda878ceaa309afae1df46f142fe271fce34a474
fd773a1fa9b41a9f137a141646e33d40093df650cb94b739268d83fc6f5cc852
GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://email.sry.com.tw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 May 2023 23:45:11 GMT
date: Sat, 27 May 2023 23:45:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
61.219.44.190
142.250.74.131