r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13990
Expires: Fri, 25 Nov 2022 12:36:53 GMT
Date: Fri, 25 Nov 2022 08:43:43 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3693
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:43 GMT
Last-Modified: Fri, 25 Nov 2022 07:42:10 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6834
Expires: Fri, 25 Nov 2022 10:37:37 GMT
Date: Fri, 25 Nov 2022 08:43:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 08:19:04 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1479
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uzd1DIRQyIfg+sYp7DjfhXLGMxGt4vBw0xQT1i5z5FMIpoDXeQkS32S9oxvSeSSGy5CrGLHD3TA=
x-amz-request-id: 2VDHT2HA11KNNQ09
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 08:40:44 GMT
age: 179
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.kimsnoodles.com/
200 OK 8.3 kB IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 451e1175f03d72c7873217d91b331f8d
9dd45f04109c9dfbb3ba1dada97cda2fb68b65fb
e82e2b466104ff744010312e9d58fc7cd783737e94e392ba4ea2aa5c52d1e720
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:45 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js
200 OK 1.0 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js
IP
File type ASCII text, with very long lines (2609)
Hash f56bc0a6837b34f783f73cd70cd9f2c1
a093b6f45674f1cac3ccc35498eb1a5945f7dde9
0c67ee4dc6af2a5a0b020d3e2e5b049720e516bb4faf6b0b60bd96bf3eba1199
GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 1046
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-ad3"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9295388
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2FbeOkpvaszUgI8WBQJpoty0izHjNjkgwz1r3R3ollEX1IGVK38YoHxkhchJv5OhOGRz%2F5wtyyVdSgfCKkan%2BQcMGH3ltQYFyG9HUBWJWi1SxmqO1sVpQYEGogHQR%2BiGP3FQp6u%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac5a0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/flickity/2.2.1/flickity.min.css
200 OK 508 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/flickity/2.2.1/flickity.min.css
IP
File type ASCII text, with very long lines (1697)
Hash f413711e6703ff3eeb335151dd33c7b1
428989b369961458caa10e90bbef66bf56236997
948999928527e5617da8c1b8e3fc91168fdac403e788ae5039e2d0fc82a0d877
GET /ajax/libs/flickity/2.2.1/flickity.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: text/css; charset=utf-8
content-length: 508
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5e-705"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1955714
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LQnhsYjkhrVS2w3uzHNrGpz8jISeg1cI9OWJRsuxqICerHvOJ5IZE75EiiWIN0g75vHVCgmZ9rrIrNPQqat8jWET1j%2BxbvhwttMyy2nUDk4rzKBJaFDgnawDohjdWwljJChDmmDW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac660b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/flickity/2.2.1/flickity.pkgd.min.js
200 OK 12 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/flickity/2.2.1/flickity.pkgd.min.js
IP
File type ASCII text, with very long lines (53821)
Hash 8f2e98cf96665592ac4ed930214d89db
d0be65b1a146fe450350d841885e3563b8dd45e1
306e9eeecb92ca5d68ba35145ec251f87a90ed88131f11f01a8efd43e2e0f56d
GET /ajax/libs/flickity/2.2.1/flickity.pkgd.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 12050
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5e-d32f"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1266652
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F5AkMz5mUROk2qDKbq48nsNJFkuSk3%2B5DrjP%2FjPx1Oj1vIkdnC66nB3eEIEGi4kBjQ5WXlcH%2BJ1JtuHShy0m0XCJeEXE0IFuwFG92JkSQxGYCYBI9QMVMTaYy%2FtgVDC3GzhAekJF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac630b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/gsap/3.3.4/gsap.min.js
200 OK 22 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/gsap/3.3.4/gsap.min.js
IP
File type ASCII text, with very long lines (59814)
Hash dd5b2ecc1fce4ca2b6c85ad9631efb8d
0f557c930f5a7006a40730c32e58aa762d8dc5c1
dfbfa8916101149b14f3ae9339b8baffd31510bc125ad16b014341542d7dda79
GET /ajax/libs/gsap/3.3.4/gsap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 21498
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eee8dfc-eacf"
last-modified: Sat, 20 Jun 2020 22:30:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 208151
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tLgUZTvTfYgM9eSOkPOb6lddSizHUi9XMZKiL352FRUZcZ%2FKCiqXCCyBVooVwWCU4%2F%2FthaWI9kNFsYdgQuOw2675XYZDm4hy5xm%2FEoeWh%2B8KY82bjz0RWyZ6%2F3Bmwu%2B4eSbQcIuU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac6b0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js
200 OK 2.3 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js
IP
File type ASCII text, with very long lines (8152)
Hash 97c687af34ccd69fdfe48fbca70afec2
ab75720b2143215335378849e4f295a290d4d41f
748b1da138fb49f26c67ae1eaa8908da0b8c9625ad0ece81d704a7fb9a7d07b5
GET /ajax/libs/wow/1.1.2/wow.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 2346
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04033-1ff6"
last-modified: Mon, 04 May 2020 16:17:55 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 826691
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WmBIpVtLhX1enNQ3UCp0%2BoYSyKwFgaJqAujyKuifvcvED61MrrVsQwHdhZIzb3DFsoBrITuH8yCLaYnWnDXN5Yl3ALnkA9ibk9IA3TXoyc2xmYZK5Wlh5RfLnsxC7rut6hbRCcTj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac680b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.7/jquery.fancybox.min.js
200 OK 19 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.7/jquery.fancybox.min.js
IP
File type HTML document, ASCII text, with very long lines (31972)
Hash c8e69fc65287045e4f083a6bcd40b8e0
fa3a37740705510fe08c3b286ea9a81e2e4bb04d
bffefe5f48974eeda69bb6a53127b10ee8244ba7f9dd4a925f2f2c1bde189db0
GET /ajax/libs/fancybox/3.5.7/jquery.fancybox.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 19249
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e58-10a9d"
last-modified: Mon, 04 May 2020 16:10:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1180128
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VHJ2r%2BAUOr4cVvY6SVdOil1lvr0FmkEDBH691X%2BPkX7udhcsw0ooz5mCg4MH%2F%2BiwEyitgOTB08PXH5Fru1RPbOI%2FwQsFo1BgdyWM84peGinbv6dcG4vfODMV8m1i8N9KJkY5VPzP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac620b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.1.1/plugins/unveilhooks/ls.unveilhooks.min.js
200 OK 548 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/lazysizes/5.1.1/plugins/unveilhooks/ls.unveilhooks.min.js
IP
File type ASCII text, with very long lines (1440)
Hash eb59c0a682d3cb0cc9e95128abe9c70d
c995c95e9c957c20a259d73eb480d3e49caee6c3
2eead150b0dc5e393da746fe02401b45a172a904228586dd4b385ab9e9559e6d
GET /ajax/libs/lazysizes/5.1.1/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 548
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed0-5ba"
last-modified: Mon, 04 May 2020 16:12:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14792635
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kErxiil9Jjol3oWqxpg14%2FHpNqAiIFKQpLWPW2X%2FY9uMIM4niohkAGWlkkA7xA7MukdX6DvH3hC9kO%2F0IQSFGOPM3s4gfve%2Fi52frlJsKCBKQ7qxuX1EM4z%2BbYp5APRj8pGvsC%2Bq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac6a0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js
200 OK 6.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (23122)
Hash d04a4870c34aa1eeffa143a833d3d54f
420caf56b3d6c80bebf295755eb8d0aff99b81bc
47f5429e80f315ec9f725585916d48b760932145eab3f2e6de9a3246b909c56f
GET /ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 6677
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-5add"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1266230
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qbuDo%2FIoC9%2FKoWijWwpKe4f%2B5oKkJYRtGxkwFZjR3yC%2BSf7FcofrmS24FLyyb8TEsU3nQa4Zoi%2FQYlJYKtGvge%2FEeo0kBeouqmTA573SOZ%2B74H1Jw4z0Rj2blJb%2BIkX2%2BpS%2FMRa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac5f0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/locales/bootstrap-datepicker.zh-TW.min.js
200 OK 262 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/locales/bootstrap-datepicker.zh-TW.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (392), with no line terminators
Hash 30128177ed580627f3b84fee203f78d9
31410e2a4bc47475880faf8912024265b9f564f1
49fa06bc424c06b270f73e29b8a189bbbe8cb4f412298b8c78a0eff620325b25
GET /ajax/libs/bootstrap-datepicker/1.9.0/locales/bootstrap-datepicker.zh-TW.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 262
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-236"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: MISS
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MJ6pyZi9pTtCDsFExuC34RCJW8q%2F5hffi2z1P3yeh2jSam2%2FOsIpb51Ktu8i82sCcVDvzmTYRMV8H7kXlpFqoBD0vpw67HMekXN%2B%2FI1%2FrutKFcIzuUUqBKe2rflNF2SzMHFRVck9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac5d0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery.touchswipe/1.6.19/jquery.touchSwipe.min.js
200 OK 4.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.touchswipe/1.6.19/jquery.touchSwipe.min.js
IP
File type ASCII text, with very long lines (19963)
Hash 3549f54911bed37334a93ce1e28a9956
9637f5cc0132fc19e11bccc3a5beb26a72aac88e
2eb79988cc9ced7066336be4d57a7a24d282f3baa4497afbcbdcc77180f9c50a
GET /ajax/libs/jquery.touchswipe/1.6.19/jquery.touchSwipe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 4510
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-4f97"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1181014
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UxrICoEHX41wSr3Ve03sQFn60guD2X%2BCgGG%2BATxymzbSQOinv0zOVFMgd5ZBFwHq43wr9Ewg4an%2BHfVVbKCqcfokd38FwNuOOUj6f3LT%2FwOELnlwvjZobmn0DtaD69TtHgTTbzFB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192f2cf10b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animsition/4.0.2/js/animsition.js
200 OK 2.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/animsition/4.0.2/js/animsition.js
IP
Hash dfeaef4e48708f7a2b32d5c96710f3cf
bce2b0c0ab4f91be1d3104888c9dceffd973b55e
89a28ea846baa4c63b06ee70c35624f2af14a581ff018d97d2996cd676de6665
GET /ajax/libs/animsition/4.0.2/js/animsition.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 2438
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d2a-2ea9"
last-modified: Mon, 04 May 2020 16:04:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 355089
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5uyUz2%2B2JfvDOJLcAskgLvjkKsnVH0ut2bmS77e3GK2vaxAOUyITZBGd6NTYknbnu4cClhegfIHjmzt%2FAhX1talavmwOkQyfPPRWasLpsQIJ2crHMt9fEX3OFoRwZP0ArfbjajBI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192f5d2d0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/matter-js/0.14.2/matter.min.js
200 OK 23 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/matter-js/0.14.2/matter.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (1000)
Hash ad1658e099131d70f517a55ac554b4eb
54d6e83519ec481fb9dfec1003067206c5041275
d03a9e9a998d5a661bdc0314fb34ac6b034565eb4542363ce2f3971f0df9890a
GET /ajax/libs/matter-js/0.14.2/matter.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 22682
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f1e-1581d"
last-modified: Mon, 04 May 2020 16:13:18 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 169005
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bO0VRhU0uRUhOulo3OH2o5Z7OMNpiVA7gCpcDqPCe6Yezezs6xwy5ia9MexL%2FqRTcqjnJoBKclB8f37c21Hg1MvHvdn65MruYL3otzNZ%2FlmZTBSojbMbXmVxnkLpcFpGYMzLONlp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192f5d2e0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animsition/4.0.2/css/animsition.css
200 OK 1.9 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/animsition/4.0.2/css/animsition.css
IP
Hash 5592f50c8b32e6c0af847a4a260698bd
549aae5ba4fc743a533d1c02ce86ea9df2573352
cb5fa7c8fa7050b2b5bc559617bd457689cbc23d9a0e9cd6c5e3af18ee64ac50
GET /ajax/libs/animsition/4.0.2/css/animsition.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: text/css; charset=utf-8
content-length: 1939
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d2a-9634"
last-modified: Mon, 04 May 2020 16:04:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 732954
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YuXOrfSP3N44u3K7hZfvPZbDjt0z53XaTqFlNNR28xcdy5yCWiVkXyGqXBuR22LQsf8ktG0TmTO8NoLX%2FMMy0kMoW5hxk0UdJItToTp%2BnjgEXN%2F98bWddLaPLZJTxd2hGC29IeYF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192f5d2f0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/js/bootstrap-datepicker.js
200 OK 13 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/js/bootstrap-datepicker.js
IP
Hash 8a183e046351a59be65d5ccaafee34b0
f39d200cb540f9cdb52e626ee2f8b64de218d324
ad62bae950595bf9311e566de025567a8d7626870670075e231df971eb809bf9
GET /ajax/libs/bootstrap-datepicker/1.9.0/js/bootstrap-datepicker.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 12920
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-e22a"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2469557
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ASZvtgCK25ut2fTTxoRVu%2BfhhZq3AivTueqHXM7Jl8nORU%2FZVu5WoBoWEnTXsVFSRZojKyyneQ%2B4KlnyjvgnFbPYuMnrLgxPZElDQXjJkYIB9aNHeIf8QIsK%2F0xzip11AYtYW7Dn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192f5d300b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.css
200 OK 3.1 kB URL HTTP/2 cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.css
IP
File type ASCII text, with very long lines (12795), with no line terminators
Hash 18b46dae08e98971b16123ea48913d23
e0a1aa82445a38538413b488924613c44861c59d
62c06f2ea24cfdf0003164fca05560cc8b5333f6ef312016458e05ecbb7c8f62
GET /gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.5.7
x-jsd-version-type: version
etag: W/"31fb-G+m3m+AqHPxdlsSl4P649HK6vZU"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 08:43:43 GMT
age: 18351329
x-served-by: cache-fra19160-FRA, cache-bma1629-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3096
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/kenwheeler/slick@1.8.1/slick/slick.css
200 OK 569 B URL HTTP/2 cdn.jsdelivr.net/gh/kenwheeler/slick@1.8.1/slick/slick.css
IP
Hash 8089b828484e2269d5dcb1089c4004ba
9b61a0f5bf48ef08890dbae954ee9b5a90015d2c
35c1c8741af6e18aa88caca3d060e26808e1103a29b3ee0415ae3e3b648bcd09
GET /gh/kenwheeler/slick@1.8.1/slick/slick.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 08:43:43 GMT
age: 19041008
x-served-by: cache-fra19161-FRA, cache-bma1629-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 569
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 37421d0455431f58cbdbbd9300326121
bb2f721cf76c55dd3c3e0bcedf7cdeb7d2601261
071386cdf61026fbbfe6c87ba1ea655434735b7fbf4d5c41645fd692f486ea76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3828
Cache-Control: max-age=112508
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:43 GMT
Etag: "637f85c8-117"
Expires: Sat, 26 Nov 2022 15:58:51 GMT
Last-Modified: Thu, 24 Nov 2022 14:55:04 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 37421d0455431f58cbdbbd9300326121
bb2f721cf76c55dd3c3e0bcedf7cdeb7d2601261
071386cdf61026fbbfe6c87ba1ea655434735b7fbf4d5c41645fd692f486ea76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3828
Cache-Control: max-age=112508
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:43 GMT
Etag: "637f85c8-117"
Expires: Sat, 26 Nov 2022 15:58:51 GMT
Last-Modified: Thu, 24 Nov 2022 14:55:04 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
www.google.com/recaptcha/api.js
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 1309ff133720d219cc98090d66a051ed
b96fc5a893e42be16d687d7abdecdb13d348a019
358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 25 Nov 2022 08:43:43 GMT
date: Fri, 25 Nov 2022 08:43:43 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/vue/dist/vue.js
200 OK 104 kB URL HTTP/2 cdn.jsdelivr.net/npm/vue/dist/vue.js
IP
File type ASCII text, with CRLF, LF line terminators
Size 104 kB (103737 bytes)
Hash 29fd22d3a9ffed86fa71717076fcbee8
f91a5b6a8ffb8f2ff2ac0d9993e0e80133b6d9e7
32a361a0e3236b9d7beeae0fbc8b8b139957d72bf394c63ba6030cb25d50553c
GET /npm/vue/dist/vue.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.7.14
x-jsd-version-type: version
etag: W/"69e4a-BKrau4AkkDJGeiJbm9fIy8gIwGA"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 08:43:43 GMT
age: 28416
x-served-by: cache-fra-eddf8230121-FRA, cache-bma1629-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 103737
X-Firefox-Spdy: h2
www.kimsnoodles.com/css/bootstrap-datepicker3.standalone.css
200 OK 3.3 kB URL HTTP/1.1 www.kimsnoodles.com/css/bootstrap-datepicker3.standalone.css
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
Hash c89b10eb1e83166c9427f9b5442a4b5e
aa615ab872c46ae2e7f683b3647cdff7c1b1bd59
be727c039dd49f33bfe67e2640ae9dfc2e617ef943fb30936eee93e8d76e605e
GET /css/bootstrap-datepicker3.standalone.css HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:38 GMT
Content-Encoding: gzip
cdn.jsdelivr.net/npm/medium-zoom@1.0.5/dist/medium-zoom.min.js
200 OK 3.1 kB URL HTTP/2 cdn.jsdelivr.net/npm/medium-zoom@1.0.5/dist/medium-zoom.min.js
IP
File type ASCII text, with very long lines (9314)
Hash 6604b00ad8312c15e92e56842fd3f7f3
4d4980230839cd062c8482036b251c9d50b668cb
423744f8cf1a8c0fdc0c1703790d25176aa4ff50c8c2c048ad1953b4913ccf4e
GET /npm/medium-zoom@1.0.5/dist/medium-zoom.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.0.5
x-jsd-version-type: version
etag: W/"24bd-rKnqRfCpqe0VkDpm3ieiuqC1j28"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 08:43:44 GMT
age: 2692480
x-served-by: cache-fra-eddf8230082-FRA, cache-bma1629-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3051
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 0e37652a3cc206d79ca6310449eb0c93
fa541bb5e8471e82815dbd75f575f0d2c34e44bb
c5eebf741fc39402bf42e0769066ccc25d80bef222b6eaa2e6310d996fa75f05
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 08:43:44 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "8382515F112F54798B5520932C39AAC3A3E8A9F7"
Expires: Fri, 25 Nov 2022 19:00:00 GMT
Last-Modified: Fri, 25 Nov 2022 07:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2521
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f919306bfdfab8-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 08:08:53 GMT
cache-control: public,max-age=3600
age: 2091
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
maps.google.com/maps/api/js?key=AIzaSyBGOWiJisc2owlfz2KTFB1U0iOFV6JYJtc
200 OK 53 kB URL HTTP/2 maps.google.com/maps/api/js?key=AIzaSyBGOWiJisc2owlfz2KTFB1U0iOFV6JYJtc
IP
File type ASCII text, with very long lines (2380)
Hash a922452c0c75b70009231125eb518a8e
dc9772779a0e362a33e9521ac5f61da32389041b
c438e40b9900a24fa3a39ea728dd8087d8dae0a89f89d589251897c9248d37fb
GET /maps/api/js?key=AIzaSyBGOWiJisc2owlfz2KTFB1U0iOFV6JYJtc HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Fri, 25 Nov 2022 08:43:44 GMT
expires: Fri, 25 Nov 2022 09:13:44 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53333
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=27
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js
IP
File type ASCII text, with very long lines (32086)
Hash 430e927c980ad4079de727fa59dd93f2
891aaada9a55a91292999f6d50fd300439905982
e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
GET /ajax/libs/jquery/1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 20 Nov 2022 00:27:16 GMT
expires: Mon, 20 Nov 2023 00:27:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 461788
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.kimsnoodles.com/stylesheets/style.css
200 OK 33 kB URL HTTP/1.1 www.kimsnoodles.com/stylesheets/style.css
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3027f59a6e205c3aeede3673bdbbd9a1
9a15f3a165ab7fb6c0af860fe926d68e60ca1c53
f34913339a63c64dac448f02cdd5c5dbacad4998f93b376d9f5baf412fd39a8b
GET /stylesheets/style.css HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:24 GMT
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e61bf6343c762121fa1ee3bef02b2b3d
febaac994a37d9e0da0c3dee3e0195ad5c0f06da
b7b3026fb667210cad2b5d298e5a19f52da6337e6f79ea5498b8ffa00916eb0c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123402
Date: Fri, 25 Nov 2022 08:43:44 GMT
Etag: "637fbc89-1d7"
Expires: Sat, 26 Nov 2022 19:00:26 GMT
Last-Modified: Thu, 24 Nov 2022 18:48:41 GMT
Server: ECS (dcb/7F3C)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 54yKnV1ylu2H0u8b9VsI3sOy2myTMcbruWSnmPjHfBjbzwSMP1ZU2Q==
Age: 705
www.kimsnoodles.com/js/jquery.parallax-scroll.js
200 OK 2.2 kB URL HTTP/1.1 www.kimsnoodles.com/js/jquery.parallax-scroll.js
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with CRLF line terminators
Hash e212222de217bfa4d11296d3cfc55d01
ec84cd84baa2e3ee2aaea25b9ce3c17fdb146c32
8137110ca517b131f5b3f7e831af4f32b205fa5f62ac2e60fe8f80d61b1180cc
Analyzer Verdict Alert fortinet Phishing
GET /js/jquery.parallax-scroll.js HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:24 GMT
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2340
Cache-Control: max-age=90125
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 09:45:49 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.kimsnoodles.com/js/flickity-sync.js
200 OK 1.1 kB URL HTTP/1.1 www.kimsnoodles.com/js/flickity-sync.js
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
Hash cf817cb7eff1b458bbb0e57061dcfef5
5bbac9211aa67eedcde4db070490e80c6ff8825f
8b6bc7f7d1428fdb29029eaf56850a81ae3976280255deba57c64006983827f3
Analyzer Verdict Alert fortinet Phishing
GET /js/flickity-sync.js HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:23 GMT
Content-Encoding: gzip
www.kimsnoodles.com/css/animate.css
200 OK 3.8 kB URL HTTP/1.1 www.kimsnoodles.com/css/animate.css
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with CRLF line terminators
Hash a27439e6cab19c24c33e1ae077ca5b40
6ac749333cb94ed5d40d999107e4e1c4d1742c56
5e9381c3281210a9698b277a2215ba662ad1aed357292532bc0a4f4cc2703a30
GET /css/animate.css HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:38 GMT
Content-Encoding: gzip
www.kimsnoodles.com/js/fullpage.css
200 OK 1.7 kB URL HTTP/1.1 www.kimsnoodles.com/js/fullpage.css
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with CRLF line terminators
Hash b8cf3064531ed42dd8dd96bedda50541
d8c33256a49f32a1b20c5ff620a276d95b94f4a6
e3e1052bf38b1b1d2d8099f7f381b056ee0180c96a5366f2569a85c86141fd56
GET /js/fullpage.css HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:23 GMT
Content-Encoding: gzip
www.kimsnoodles.com/js/ScrollToPlugin.min.js
200 OK 1.6 kB URL HTTP/1.1 www.kimsnoodles.com/js/ScrollToPlugin.min.js
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with very long lines (2895)
Hash 8b009f289c379915711c73486451f6ac
675b2a45d517bef780a04306f3046128627fa6af
0cbca1f8f3727283b35cd613f9136e36edae4ba9a2ba960c2c415c0f063fbb26
Analyzer Verdict Alert fortinet Phishing
GET /js/ScrollToPlugin.min.js HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:24 GMT
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.kimsnoodles.com/css/aos.css
200 OK 2.8 kB URL HTTP/1.1 www.kimsnoodles.com/css/aos.css
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with very long lines (26053), with no line terminators
Hash c31f40627f9f3c89e290cdb4e68cdc51
63f855d0fda8ea3d7737c72a13cc5589f913f494
3624653d2e93a6e46fb6a457e71b0fd00e04c95534868f68012768b6783a2406
GET /css/aos.css HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:38 GMT
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 136195
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.114.woff2
200 OK 75 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.114.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 75244, version 1.0\012- data
Hash 13f5644707ac4a8817754e277a5e4954
39fb18d55cbd2238d57bfe4a396af9c78633b562
f1c4916fc37af5dec08ebd1bc5138a4317fadd5b854bfc4137983b7ecfd38cf5
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.114.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 75244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:42:35 GMT
expires: Wed, 22 Nov 2023 22:42:35 GMT
cache-control: public, max-age=31536000
age: 208869
last-modified: Mon, 09 May 2022 19:30:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.117.woff2
200 OK 69 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.117.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 68788, version 1.0\012- data
Hash 8d0e6f3b9afab9d0c70d3d8a380f229d
c592740ec4adf7dec0238a387b2c6f81c73fb80f
e613ed4308f865da260455901af0b7b2e0cc0bfe2c8dfa7aa4cc0aa3dcb974b8
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.117.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 68788
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 22:13:06 GMT
expires: Fri, 24 Nov 2023 22:13:06 GMT
cache-control: public, max-age=31536000
age: 37838
last-modified: Mon, 09 May 2022 19:30:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.kimsnoodles.com/js/aos.js
200 OK 4.8 kB URL HTTP/1.1 www.kimsnoodles.com/js/aos.js
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with very long lines (14243), with no line terminators
Hash ed39920b616842775db16c8fff64522c
181493ad31f56f005cd211b77b15eb979556c7dc
8d8e87957742379413767fa551505d26450b73f9d2da4aaaeede17e853fa97cd
Analyzer Verdict Alert fortinet Phishing
GET /js/aos.js HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:23 GMT
Content-Encoding: gzip
www.kimsnoodles.com/js/luxy.js
200 OK 2.1 kB URL HTTP/1.1 www.kimsnoodles.com/js/luxy.js
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with CRLF line terminators
Hash 348abb44b0cc2113d6d3b26183776a7e
77d9147589a5dc0956669d87b6558b7c537dfc4e
00b3d09aa304ef251bf376b1c3df995c2fb51ad87dc0edfe47f2981f1e01ee7b
Analyzer Verdict Alert fortinet Phishing
GET /js/luxy.js HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:24 GMT
Content-Encoding: gzip
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.115.woff2
200 OK 76 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.115.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 76120, version 1.0\012- data
Hash 458c27941e89dd799d17b48021e1b9dc
73c9c240dd196e9a9f29a877392798fe5fef36f8
bf4f096f9d656631111cdf91411fc73f3e68f3ddb8b8b3ea12a149554ac93cf2
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.115.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 76120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 20:04:55 GMT
expires: Wed, 22 Nov 2023 20:04:55 GMT
cache-control: public, max-age=31536000
age: 218329
last-modified: Mon, 09 May 2022 19:29:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Serif+TC:400,500,600,700,900|Poppins:400,500,600,700,800,900|Roboto:400,500,700,900|Noto+Sans+TC:300,400,500,700,900&display=swap
200 OK 408 kB URL HTTP/2 fonts.googleapis.com/css?family=Noto+Serif+TC:400,500,600,700,900|Poppins:400,500,600,700,800,900|Roboto:400,500,700,900|Noto+Sans+TC:300,400,500,700,900&display=swap
IP
Size 408 kB (407727 bytes)
Hash c2ca1f1c704b2a2464a73951699bf7ba
c0525cc7e9c755d50441e0c2013002a115d36a3a
4b84598e5080e8e95805b3c6f189f14b34073fb9963128ca5eb82b131f7b69d0
GET /css?family=Noto+Serif+TC:400,500,600,700,900|Poppins:400,500,600,700,800,900|Roboto:400,500,700,900|Noto+Sans+TC:300,400,500,700,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 08:43:44 GMT
date: Fri, 25 Nov 2022 08:43:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.kimsnoodles.com/dist/common.js?t=0119
200 OK 1.8 kB URL HTTP/1.1 www.kimsnoodles.com/dist/common.js?t=0119
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
Hash a71545c59f32dc71216a1cb48b70dd09
5fa534e363b0616b42bd4275d709ae287f953ad7
86bf765b500548b9d44845d8f852072d15373bbcef3817945ef5adaa3a703690
Analyzer Verdict Alert fortinet Phishing
GET /dist/common.js?t=0119 HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:38 GMT
Content-Encoding: gzip
www.kimsnoodles.com/js/jquery.fullPage.js
200 OK 30 kB URL HTTP/1.1 www.kimsnoodles.com/js/jquery.fullPage.js
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type ASCII text, with CRLF line terminators
Hash d0ed0829069cfed6f3dd31a833e4b96c
433b729d0716f75cbb10de36a48e255c83cfc858
e46088afecda2325f4a380ca1face2f74dbc8a7a754f15b54b10a940a5a44faa
Analyzer Verdict Alert fortinet Phishing
GET /js/jquery.fullPage.js HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:24 GMT
Content-Encoding: gzip
s3-us-west-2.amazonaws.com/s.cdpn.io/16327/ScrollTrigger.min.js
200 OK 40 kB URL HTTP/1.1 s3-us-west-2.amazonaws.com/s.cdpn.io/16327/ScrollTrigger.min.js
IP
File type ASCII text, with very long lines (40225)
Hash 0bd00a14ff3dce9c576926fe7bbc2360
5856eb48a4c46d17be23e1e87b474cef72f601e5
ad949965cb9255f1f6aa97167160f9849d37cf7970398008ec7026f0e6ad7b66
GET /s.cdpn.io/16327/ScrollTrigger.min.js HTTP/1.1
Host: s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: wHN2h4+0Yer9usB8B+J3z0nuQB/UZcfFiWPOoAlWdRKs8S7A7cun/7sqb8Zfqhwgsr3HccQVMBA=
x-amz-request-id: G3YC2NFYD3FCGJW2
Date: Fri, 25 Nov 2022 08:43:45 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 23 Nov 2022 02:56:21 GMT
ETag: "0bd00a14ff3dce9c576926fe7bbc2360"
x-amz-server-side-encryption: AES256
Cache-Control: public
x-amz-version-id: tMWFUPIj5tFkFaV_PrHB_nCk5kX93unL
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 40532
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Bdww4CXqP8M8K9mp5yIICg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2Vs2X3bvSaLjyrrH78RnTQBAIGM=
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.118.woff2
200 OK 63 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.118.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 63168, version 1.0\012- data
Hash 01d12d348244c8742e3535e212650eff
d3934fceab038e1e23fec92641f57a60dfad6118
896adb75b41f312934d2c084c31df6af7a461567ab9b45cc76f5124d24cc3752
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.118.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 63168
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Nov 2022 23:38:23 GMT
expires: Sat, 18 Nov 2023 23:38:23 GMT
cache-control: public, max-age=31536000
age: 551121
last-modified: Mon, 09 May 2022 19:30:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.108.woff2
200 OK 73 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.108.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 72792, version 1.0\012- data
Hash 33f28a478aeb08720406fd923b012ee1
653e26fc7751faf2c42f668ccf1499febfe26b60
71f68829fa09f58521c4c837c05bfb36219d16a77dd4a907e5d631844640f2c8
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.108.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 72792
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 03:11:34 GMT
expires: Thu, 23 Nov 2023 03:11:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 09 May 2022 19:53:16 GMT
content-type: font/woff2
age: 192730
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/vh-check/dist/vh-check.min.js
302 Found 75 kB URL HTTP/2 unpkg.com/vh-check/dist/vh-check.min.js
IP
Hash bbd583f21d583bcc86280914819ee7d9
872c04a396b3764c8a8cb3f4dfd991ddb891747d
7329b6de860ada1eb28213f9b1419949eac3f797933865fdfc08586f1814d2d6
GET /vh-check/dist/vh-check.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 08:43:44 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /vh-check@2.0.5/dist/vh-check.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJPYWKKDR9JR05R0JYKC212C-ams
cf-cache-status: HIT
age: 436
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f91930aff4b51b-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.113.woff2
200 OK 77 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.113.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 77352, version 1.0\012- data
Hash 9923733eb950a11671da6dfda49e1f28
fd9185378c84fe2a06d99bec0e9d14e05d554732
8057d8ef047c6a1bf9cc0230f7657dead23fb56ea2e934c030e228ab379b39d6
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.113.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 77352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:42:34 GMT
expires: Wed, 22 Nov 2023 22:42:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 09 May 2022 19:53:29 GMT
content-type: font/woff2
age: 208870
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.106.woff2
200 OK 74 kB URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.106.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 74520, version 1.0\012- data
Hash b44d818ef4c3685fdf0d8b1b76f1bd22
c6ee693758db115947821079e070102bd3388290
d79a6b0e86550cc7ebcb8f7da27e33335c85e61ad6531d2fc1d8f31c02cb36df
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.106.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 74520
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:52:48 GMT
expires: Thu, 23 Nov 2023 21:52:48 GMT
cache-control: public, max-age=31536000
age: 125456
last-modified: Mon, 09 May 2022 19:53:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.kimsnoodles.com/images/fini-4.svg
200 OK 5.2 kB URL HTTP/1.1 www.kimsnoodles.com/images/fini-4.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (925), with CRLF line terminators
Hash 9f48061ce143752b27f166f431044827
1da0556eda72eb3f0e827db9e5e393ab417eeac8
3047c37381223aeab54608be321b5e5105a1455d3f8890a3e4634256f3045d75
Analyzer Verdict Alert fortinet Phishing
GET /images/fini-4.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/fini-kumo-1.png
200 OK 10 kB URL HTTP/1.1 www.kimsnoodles.com/images/fini-kumo-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 346 x 142, 8-bit/color RGBA, non-interlaced\012- data
Hash a359b0d363c8e14a80a78254913c9e81
df30ef7bf77c868376942b4e4180dedcfcde4efe
1846c2927bca22c1566ee8bfba0fb2cfa05515c36a7a4f5eddcf3985ae5825c1
GET /images/fini-kumo-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: image/png
Content-Length: 10463
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/fini-deco-1.svg
200 OK 1.2 kB URL HTTP/1.1 www.kimsnoodles.com/images/fini-deco-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (880), with CRLF line terminators
Hash befc70e9b3abd1e26f1e6a2f29067c3f
ec64db9636953486ef8a79df8d1501d7f6603f65
bdb1893f0cbc2bfe97371050cb9ce17945b57a7ef382d24735d6d6309c55df70
Analyzer Verdict Alert fortinet Phishing
GET /images/fini-deco-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/fini-deco-2.svg
200 OK 522 B URL HTTP/1.1 www.kimsnoodles.com/images/fini-deco-2.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (784), with CRLF line terminators
Hash 4cf8776ac2ce95fbc1109b3ebfcf0271
1b8a4ef14fdb89cd608f79945d9a920aa4445127
b7ba198ee49154a6fab9e9e35a10c93ad8498d37e4acc8c126de00538c9c9371
Analyzer Verdict Alert fortinet Phishing
GET /images/fini-deco-2.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/fini-kumo-2.png
200 OK 15 kB URL HTTP/1.1 www.kimsnoodles.com/images/fini-kumo-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 408 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c2b7512fd51bf1cb212192a1223d12d
be1f16b78f3d8da38335090ffd227179194821c7
11590b1bcad3ddf4a33dbcfa81c060a98e1b103696fffaf733afeee4c9a63055
GET /images/fini-kumo-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: image/png
Content-Length: 15397
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-banner-marquee.svg
200 OK 4.4 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-marquee.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1392), with CRLF line terminators
Hash 2bfcb7106edb6cc2292345b4011e8a25
d45fd05e6bae696aa63187e0abdea79e1b9093bb
542943413fb71f58c565dd9972a73ecae806a07d723802f56809ecbf248ca06a
Analyzer Verdict Alert fortinet Phishing
GET /images/index-banner-marquee.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/fini-bg-1.svg
200 OK 28 kB URL HTTP/1.1 www.kimsnoodles.com/images/fini-bg-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23654), with CRLF line terminators
Hash 722706bfb96ec297d7d4f5666cae1a76
9dd69837b3be3a8907afa29dcfe3e1873b6aeb65
e8f97173ab9cb94bc84f014e66a7dd08f8441b422785034a06968841ae5f9f01
Analyzer Verdict Alert fortinet Phishing
GET /images/fini-bg-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/fini-bg-2.svg
200 OK 28 kB URL HTTP/1.1 www.kimsnoodles.com/images/fini-bg-2.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23637), with CRLF line terminators
Hash 733faaeae4dbc0b69aa56f00e13d295b
5f37d919e2f1ee2b162ecdb76a07f3adc0e7c8d1
544eb72fe458e2a985ea3b6aef513b4233b9f889b9376ce2589e06ecec6ee75d
Analyzer Verdict Alert fortinet Phishing
GET /images/fini-bg-2.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:51 GMT
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2709
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:43:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2709
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:43:45 GMT
Connection: keep-alive
fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.119.woff2
200 OK 503 B URL HTTP/2 fonts.gstatic.com/s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.119.woff2
IP
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
GET /s/notoseriftc/v23/XLY9IZb5bJNDGYxLBibeHZ0BvssrbXwuVcgUbQ3zF6M3eg1qzxeg6QwzxcSPzLZfXbm0Gs_7uos.119.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.kimsnoodles.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 16:03:47 GMT
expires: Wed, 22 Nov 2023 16:03:47 GMT
cache-control: public, max-age=31536000
age: 232797
last-modified: Mon, 09 May 2022 19:29:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2709
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:43:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2709
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:43:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5863138af1ddbba34a7856242a7b3a06
2eba66ff6539388c48562503e8d11ff0e060350a
d1543e1b803a07095148b743925eebbbf21f566a2df9b785a1a9d48c5604496c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8917
x-amzn-requestid: 10f3b269-9437-476d-ae4f-a0ac3fb78491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wEIwoAMF8uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4cfeecf4553b26381ed11875;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lr9z8FWWpMGtxtvcYzeT-ewuydSzpma8I06pszLDQIICotFkB_SZlA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:55:30 GMT
age: 38895
etag: "2eba66ff6539388c48562503e8d11ff0e060350a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd87485db-f230-4024-987f-6b9ea6098576.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd87485db-f230-4024-987f-6b9ea6098576.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05a92b9f554600c920e8b772eb16ee75
7f29e0e2de89f7a88ff0bf2a720365032ef11cc1
4b51a70a0ee6fe0d723880ea70fee25c15bff671d8a484bbb2a3c9962303c735
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd87485db-f230-4024-987f-6b9ea6098576.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10356
x-amzn-requestid: 8450975f-bcb2-4b59-b0ef-42e43d1bb16a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM-cGKIIAMFo7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8ec2-7f95154e3177c6e30a925244;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NCCF79BaJkG2j75ihGL9jd3gEE4zajsC9vmEKMmk9u7-wm2s5u4mVQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:43:09 GMT
age: 14436
etag: "7f29e0e2de89f7a88ff0bf2a720365032ef11cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba7b9c131ab7e5998f25b069ba3860a0
0214fc0deecb1115766802f42cfd256e3c479490
717aa23c687ccebc1b5ebbfd88d0e4fe181fef038d308231842b2b1969f3976b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6130
x-amzn-requestid: 0ab34b27-2c6b-4a37-87ad-6fa56a265453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wF7KIAMFjlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4a3d24f93ceb37d37a5ce1ee;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SHmcFNiZ97RU02VeLiHLjFynYiSuaQP8T_XKG2UaAigWXG5sYhdVLQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:55:28 GMT
age: 38897
etag: "0214fc0deecb1115766802f42cfd256e3c479490"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg
200 OK 2.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 66d06d3cac1784e4ce6c8c89c300f10a
41ef94d198bbf98185eb332a3b6934c3c26c3afc
55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2351
x-amzn-requestid: 1e3e6b14-8f46-4b62-a3d1-f5dbe5d5f94f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGupUE_VIAMFa3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f5e3b-573fabc44ce59c2f4c24a32d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 12:06:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XEUrOPYr2rn89eMIJORVFnpqJfxqfjBadcbplZKzqLjDkzHV8NEbHg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 18:51:30 GMT
age: 49935
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92171fa8fbc051aefeb8ceb6072848de
377775b7c7b085efa6dd653d285ba3a52af6a549
537c4d5cc3ef2e60c3d0171ac31c1dba4ab2ff340108015787a9dd20dc76b7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6891
x-amzn-requestid: 6da0ae90-c3cc-4e9c-9a0e-3c72b4eb7605
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b7m2NGsvoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637aeb5a-1ed2badf0e84d40e6a052f7a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 03:07:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: daiU0caUPDqn0vVDY_eK8eaMxgIenjmw1vLyUOtVYOs-FmuSIgY3Nw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 11:37:02 GMT
age: 76003
etag: "377775b7c7b085efa6dd653d285ba3a52af6a549"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f4b5f150-a5dc-40bf-93b9-394c294a51cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEmkRFSnIAMF5vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e8481-74454bee1a1ec6d506f3d75b;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 20:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZVv8iTGCYV-IiBJ6KwNSG1ZWSEwClaQopUejSqZq0S1wd782lRoyKA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:07:32 GMT
age: 38173
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.kimsnoodles.com/images/index-banner-2.jpg
200 OK 63 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-2.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 577x782, components 3\012- data
Hash 9a1a4dd98709f091ab5fb65932901fb9
0f06a5020aae7522267ad1285cab90d10cae3558
6d548b63387e0f546fb1eec0ef1f41ccad39fda50103731f9758eedbebeed27a
GET /images/index-banner-2.jpg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/jpeg
Content-Length: 62674
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-banner-5.jpg
200 OK 93 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-5.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 577x782, components 3\012- data
Hash 22ac9f73c65f9494718daa7548b7030f
fa9e6d52bb15690ace879bdf89f222122c705092
861d809e85d180b1eb9db5ef6aeb4ff857f516c41f5d97c627dc35a3fa5dc1c6
GET /images/index-banner-5.jpg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/jpeg
Content-Length: 93130
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-banner-3.jpg
200 OK 70 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-3.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 577x782, components 3\012- data
Hash cb6b49ecc3fe5200aa8c7ebc7e656e38
ef492a8c73a9f12d216de0d0ec27d9648b4fb0f0
2089134a2118ac493ccf457ca0ca35697b2d1a1085d5a7ed437b4c561e6d14d8
GET /images/index-banner-3.jpg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/jpeg
Content-Length: 70274
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-banner-4.jpg
200 OK 108 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-4.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 577x782, components 3\012- data
Size 108 kB (108059 bytes)
Hash 898f21fe1f724dc97ae950ee50b918e9
97387a251cfa341d01f22907e21f014cc79246a7
91f92574df20905c4aa1eec31062274a070d8738b9541d81814bc17f211c7ec5
GET /images/index-banner-4.jpg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/jpeg
Content-Length: 108059
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-banner-arrow.svg
200 OK 208 B URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-arrow.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash 5241433a50453a7c5298e4c0fe3778cc
121483f55a70f6f8e5f4cbccaf0f205fb35a5a3f
b6816696d1c021c8c5a10672a2cfe512302c8fe5f5c76f98090124ce45175524
Analyzer Verdict Alert fortinet Phishing
GET /images/index-banner-arrow.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:48 GMT
Content-Type: image/svg+xml
Content-Length: 208
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-select-text-1.svg
200 OK 6.4 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-select-text-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1146), with CRLF line terminators
Hash ce0e13413a738d653bd9cd8ecb883e2d
ac008332893c535bda813657dd5a9fecc95f432c
b6611e8c5ab692274310df7d338d1ec356c7374b4783533ffe49d2fdf1bcd60d
Analyzer Verdict Alert fortinet Phishing
GET /images/index-select-text-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/is-1.svg
200 OK 2.2 kB URL HTTP/1.1 www.kimsnoodles.com/images/is-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1098), with CRLF line terminators
Hash d9339454c3453dd5d19ac63404fd66e1
1a52f63166ff9f4cefbb1beee61f49fbc7b1797b
78f27a7ebe89aa6c8518f9fafdfef8b580e4adfe5acf21b5bacc535e423c1061
Analyzer Verdict Alert fortinet Phishing
GET /images/is-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/index-banner-6.jpg
200 OK 65 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-6.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 577x782, components 3\012- data
Hash 25195393207c6311cc57a72facc2637c
d65bb2deb1dec1cc3336979ea9bd06c691c3263f
932692e8f9cb5eebb26bbd946cfe082fc3b7e8a3badf0bbb3373e3e15721e7f3
GET /images/index-banner-6.jpg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:48 GMT
Content-Type: image/jpeg
Content-Length: 65369
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/select-circle-2.png
200 OK 6.6 kB URL HTTP/1.1 www.kimsnoodles.com/images/select-circle-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 344 x 344, 8-bit/color RGBA, non-interlaced\012- data
Hash 397059469eacc60232fc1b093d0e9dc0
2aadb194cbbfd5119bac80c7d76153803d19d7c2
1fd2f1bea1d849ed2b3b6bd6e51b846fbf0e8dff9aa7d40bb0d7b1f051de5c98
GET /images/select-circle-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/png
Content-Length: 6641
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:05 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/select-circle-3.png
200 OK 6.9 kB URL HTTP/1.1 www.kimsnoodles.com/images/select-circle-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 344 x 344, 8-bit/color RGBA, non-interlaced\012- data
Hash dd2d7d7072b01284d53a3e42a2b00910
4e0d285218a7476f02acb24c3211d86abf5f66dd
43ab0f3bbd36d8ae3e56e9d5aaa84bd4822868fda13d7a99b18b9e14fd52b86a
GET /images/select-circle-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/png
Content-Length: 6932
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:05 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/select-circle-1.png
200 OK 19 kB URL HTTP/1.1 www.kimsnoodles.com/images/select-circle-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 344 x 344, 8-bit/color RGBA, non-interlaced\012- data
Hash af166644f4865ec170998907cf68f362
85ed2401594d131d89394cb67a304dd1835f960d
c5387a2991077ce5c534803a0d4c7935b70398a40ec08e425bc0cbbb7deb1f33
GET /images/select-circle-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/png
Content-Length: 19279
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:05 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-banner-1.jpg
200 OK 108 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-banner-1.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 577x782, components 3\012- data
Size 108 kB (107614 bytes)
Hash e3b0874f54bc3f2c5cc5839c5d02a80b
051bae19b6bca5b0c6f7dce487f18e3608312896
5e434bbf8e62fde06fd02a93c370ead859d614cc4423daa6b0519fb802a78be4
GET /images/index-banner-1.jpg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:47 GMT
Content-Type: image/jpeg
Content-Length: 107614
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/index-select-text-2.svg
200 OK 6.4 kB URL HTTP/1.1 www.kimsnoodles.com/images/index-select-text-2.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1146), with CRLF line terminators
Hash 70e13a5f9f24739096d28aa2329f9ee0
d6d59d3fad98ee373c873fcbd6d1793d4cd6fcca
b80af66c117f601931c288aad4c8fa0ed935832b800ec0bd9527a03fa9c84537
Analyzer Verdict Alert fortinet Phishing
GET /images/index-select-text-2.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/isbg-1.svg
200 OK 1.6 kB URL HTTP/1.1 www.kimsnoodles.com/images/isbg-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (982), with CRLF line terminators
Hash 395448731100b617c111bd4e8da08ee5
dee7ade62d3a450077f9ff7eca340592802074ae
294504396c84136f08e89b2336250b1d9af6db4716e6dd300425dfba6e1ac86d
Analyzer Verdict Alert fortinet Phishing
GET /images/isbg-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/isbg-2.svg
200 OK 2.2 kB URL HTTP/1.1 www.kimsnoodles.com/images/isbg-2.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1744), with CRLF line terminators
Hash 837b668aed6e6726aa37f374ccf2abfa
35c330e968663f134c99d77d740afd88aae08431
7619655750b24e68eefcda5b3835463c880bcd68ecf617730487ce828b8d0c82
Analyzer Verdict Alert fortinet Phishing
GET /images/isbg-2.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:50 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/isn-3.png
200 OK 208 kB URL HTTP/1.1 www.kimsnoodles.com/images/isn-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 309 x 379, 8-bit/color RGBA, non-interlaced\012- data
Size 208 kB (207482 bytes)
Hash 11483ddf3dcef8f14a11443e48865e42
511a882279ea3227c91532c97e766f99ae0bb1f9
c711e6f9628ac1e5e6ddabce83a5b1395a78bacec64dbd4e5526112c7042a916
GET /images/isn-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/png
Content-Length: 207482
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/isn-1.png
200 OK 228 kB URL HTTP/1.1 www.kimsnoodles.com/images/isn-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 309 x 379, 8-bit/color RGBA, non-interlaced\012- data
Size 228 kB (227729 bytes)
Hash 96eca2392741e6d540e3645528aa580f
40be74afde81bd7051b9945ef7da0b0e01cf004d
33a64018bca9721b2d8608d25265b0e567ff7ca304461880021907127b9156e9
GET /images/isn-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/png
Content-Length: 227729
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/isn-2.png
200 OK 247 kB URL HTTP/1.1 www.kimsnoodles.com/images/isn-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 309 x 379, 8-bit/color RGBA, non-interlaced\012- data
Size 247 kB (247086 bytes)
Hash 0f0b3d47ec041dfcdefeda2f0de13c75
61c7cc6f69c26ba37017ea2ac01f3dae7c614e90
d12936f8ece2a27e0e672d10be6ca7d2278d1ba50e3ae4748decfffbbcd7febd
GET /images/isn-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:49 GMT
Content-Type: image/png
Content-Length: 247086
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/is-4-1.png
200 OK 190 kB URL HTTP/1.1 www.kimsnoodles.com/images/is-4-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 364 x 481, 8-bit/color RGBA, non-interlaced\012- data
Size 190 kB (190114 bytes)
Hash 0cd383b9fda38ca178f8da40fac1daac
e56ca5a396c22c55916558261c18809985f5923c
5f60c8ff06c8e4411ab7ef911476cd4cbd91d93c55314872fdbc6f2346cf2fac
GET /images/is-4-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:50 GMT
Content-Type: image/png
Content-Length: 190114
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/is-4-2.png
200 OK 174 kB URL HTTP/1.1 www.kimsnoodles.com/images/is-4-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 340 x 452, 8-bit/color RGBA, non-interlaced\012- data
Size 174 kB (173993 bytes)
Hash aa550eb7e2ed3f218d6fcd53625bdc89
0d9c726fa823694f5dd40591c7956254c134188e
9bd8b51cf865c722cddc687c0ab07661ea9a1da9571d60a42cf8308af9115cc0
GET /images/is-4-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:50 GMT
Content-Type: image/png
Content-Length: 173993
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/is-4-3.png
200 OK 215 kB URL HTTP/1.1 www.kimsnoodles.com/images/is-4-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 359 x 464, 8-bit/color RGBA, non-interlaced\012- data
Size 215 kB (215100 bytes)
Hash ab2f73f585c7061f10ef4740b1b455eb
06deda1bcfbf66f8260bd275063fc584812c7136
ecc8b10e50166d7f508b26e92d3d86a35a9c05b81725485409e5783e1bf67ff1
GET /images/is-4-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:50 GMT
Content-Type: image/png
Content-Length: 215100
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5s-1.png
200 OK 270 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5s-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 411 x 519, 8-bit/color RGBA, non-interlaced\012- data
Size 270 kB (270344 bytes)
Hash 3885bd46f145f87f2fdff629c2e693eb
27960b4b068f14927bef76e707f763064818b1a2
f9956d70a4914a022b522aefd62120fe07b709ef8db896d98215b0511f5cab12
GET /images/s5s-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:50 GMT
Content-Type: image/png
Content-Length: 270344
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5sp-1.png
200 OK 118 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5sp-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 388 x 238, 8-bit/color RGBA, non-interlaced\012- data
Size 118 kB (117493 bytes)
Hash e09f3a64dd2ff1b126f3ab1709b11df9
09bfd8680fae5e5f351e860084152a50429a4ff0
bce45317556580cad033d125f0c1ef56ee579f3801cccf0f3a98bb78caff4b19
GET /images/s5sp-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:51 GMT
Content-Type: image/png
Content-Length: 117493
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5sp-2.png
200 OK 109 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5sp-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 382 x 343, 8-bit/color RGBA, non-interlaced\012- data
Size 109 kB (109242 bytes)
Hash 680ba96ded23f6d36c961801f78fce6f
a3eae3f64173151d82cc5d1310409aee296a6ab3
fd8772be584b856c518bfce5a91d059b228085c65b0f557dae423d348dec8ac3
GET /images/s5sp-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:51 GMT
Content-Type: image/png
Content-Length: 109242
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5n-1.png
200 OK 434 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5n-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 636 x 381, 8-bit/color RGBA, non-interlaced\012- data
Size 434 kB (433732 bytes)
Hash 4624926f2c01c709c3d36042febdb2af
1b126ebb2dde3d051e5c725f70eff4a05ec8ae1e
6f7f4f372ea83cec593f819658f46b6fad905730d266924019ae1e880d436eac
GET /images/s5n-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:50 GMT
Content-Type: image/png
Content-Length: 433732
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5s-2.png
200 OK 281 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5s-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 413 x 489, 8-bit/color RGBA, non-interlaced\012- data
Size 281 kB (281262 bytes)
Hash 4909c1ee2ef75d6e65cbdff47dc81082
d62d33d01d4f010af16d1eeb631925fb70dc7fa7
766b361b4524d9b3363617be415298c563307635b739f44d164cbbee60110998
GET /images/s5s-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:51 GMT
Content-Type: image/png
Content-Length: 281262
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5n-2.png
200 OK 433 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5n-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 610 x 383, 8-bit/color RGBA, non-interlaced\012- data
Size 433 kB (433077 bytes)
Hash d17e4d042a6a88884369a191838df31d
1112db20291548b1c9c409a7fbb1b16c97010ce2
efc3db2e5b0fc503d757cded18219db8a00cc00941e41d2384734c79d2c94379
GET /images/s5n-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:51 GMT
Content-Type: image/png
Content-Length: 433077
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5s-3.png
200 OK 262 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5s-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 371 x 495, 8-bit/color RGBA, non-interlaced\012- data
Size 262 kB (262155 bytes)
Hash 42618a4e4252cd75b0e87b31ef829eb3
4eaee0707d1a2aa174c70c0ad94726cca758edc4
6944aef3f4216e9597928cfeede5030928235f8488a8335e5e669e2bad1cd199
GET /images/s5s-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/png
Content-Length: 262155
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/badge.svg
200 OK 1.4 kB URL HTTP/1.1 www.kimsnoodles.com/images/badge.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (964), with CRLF line terminators
Hash 8e3b593930601bf13fdd734e8c9d4c7f
4c823460907d4ecf80ad9e4389f520b7e978b9e5
648e5b463a56a655ea473fd6f5893c79208fda4aa7ed8b44680024c38482f30b
Analyzer Verdict Alert fortinet Phishing
GET /images/badge.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:41 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/s5sp-3.png
200 OK 129 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5sp-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 347 x 434, 8-bit/color RGBA, non-interlaced\012- data
Size 129 kB (129089 bytes)
Hash 42f034cc3a7c589dc98444c494aaf929
b9ca06bd066b747760d8acba4299a0a0ecaf6b2f
fd124d2b16f63908c0705e6143949e99fd31f1ba512f5e49ec69431eaaf7caef
GET /images/s5sp-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/png
Content-Length: 129089
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:05 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/s5n-3.png
200 OK 423 kB URL HTTP/1.1 www.kimsnoodles.com/images/s5n-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 642 x 357, 8-bit/color RGBA, non-interlaced\012- data
Size 423 kB (422886 bytes)
Hash 062a2ea29c9a964fd3bb6fd37f882382
de5ef20cda6d1c7eaf30ed10696b3546813bd482
9de0cfb1e648565d226d0bcf94ecd511e6a335bfcf7b65a3295bab2ce28670ec
GET /images/s5n-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/png
Content-Length: 422886
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:04 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/badge.png
200 OK 153 kB URL HTTP/1.1 www.kimsnoodles.com/images/badge.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 319 x 331, 8-bit/color RGBA, non-interlaced\012- data
Size 153 kB (153378 bytes)
Hash 67d807e29c08960ce8383294d6dc2370
c573d3748379923eb52d231debbda2a3363c3f72
03ee6fb1ed3c93efbbefbaf5fe0f453f9631411812b5a99f08dd3d2becbb523b
GET /images/badge.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/png
Content-Length: 153378
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:41 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/check-kumo.png
200 OK 19 kB URL HTTP/1.1 www.kimsnoodles.com/images/check-kumo.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 511 x 242, 8-bit/color RGBA, non-interlaced\012- data
Hash 4853e11d5cc0659d65fe1ed68e9cba15
ff50526df3acf6048393f91441e581bceff2ef8d
0439b77df09a9a38bc84c38f6a8ffbdb8d9471a48da755402516514d0addf224
GET /images/check-kumo.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/png
Content-Length: 18953
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:42 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/check-hand.svg
200 OK 3.5 kB URL HTTP/1.1 www.kimsnoodles.com/images/check-hand.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6376), with CRLF line terminators
Hash 9860fcb84692b59065f1a633169d9dc6
74005f4db4c506114cb7af274ffec8d4f24442c8
1719c7e2d9f2f602bab1d87d61066ad7f4224880af4725b8a87b71e64980156d
Analyzer Verdict Alert fortinet Phishing
GET /images/check-hand.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:52 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:42 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/gt-1.svg
200 OK 1.6 kB URL HTTP/1.1 www.kimsnoodles.com/images/gt-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (754), with CRLF line terminators
Hash 7ec55ea88aa7e07bdb0c06a258a9c1f3
bb901e4017e5e2ae901180d07b492bd581f5b50d
137bf40b3bf7ab38e69766258ec6591f52672e9f84f1ef2b06fa434c7a944fff
Analyzer Verdict Alert fortinet Phishing
GET /images/gt-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:53 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/gt-2.svg
200 OK 1.6 kB URL HTTP/1.1 www.kimsnoodles.com/images/gt-2.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (803), with CRLF line terminators
Hash 8c0317a65f03bc0bac61259d1cf450cd
7051ecfa0cbfdcd4b19540a5d12d86f1d64727c2
52aed09693115b58a30d03d7bd5d83b1005fe57eacea4bd7108fc341ccef2f0b
Analyzer Verdict Alert fortinet Phishing
GET /images/gt-2.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:53 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/is6-1.png
200 OK 6.6 kB URL HTTP/1.1 www.kimsnoodles.com/images/is6-1.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 182 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash ab421cba4018573813df3ec7884f8b55
a21efb1044037cc90af1ccf85a60d6bb0b093ef8
c505a199454f030971cc2fd974c97d681611817df648644bf42d46873130d6fb
GET /images/is6-1.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/png
Content-Length: 6561
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/is6-2.png
200 OK 6.1 kB URL HTTP/1.1 www.kimsnoodles.com/images/is6-2.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 53 x 181, 8-bit/color RGBA, non-interlaced\012- data
Hash 621ca6f3e641d0b25ff0c6220025ea54
a913401befd20ae0fe7e0208e3116de706d87cde
7fa795bfd92e0bbc19587007637538a8f3696a661a012ab49c25e4f0583b0648
GET /images/is6-2.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/png
Content-Length: 6096
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:55 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/is6-3.png
200 OK 18 kB URL HTTP/1.1 www.kimsnoodles.com/images/is6-3.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 176 x 266, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b208df6a9509a64c549155989aa7be5
8e07ed2fa5a4dd5080de9c621081997ab091238d
1797de52ce7b3577166e2d1147957f4c97951107e891b08ebc0511d32c8226fa
GET /images/is6-3.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/png
Content-Length: 17690
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/is6-4.png
200 OK 20 kB URL HTTP/1.1 www.kimsnoodles.com/images/is6-4.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type PNG image data, 179 x 271, 8-bit/color RGBA, non-interlaced\012- data
Hash e32b4ceac0d86d949c16f0966c6d71a4
4577c0eb9b577fa6927a0c055d3270c0d3ebb347
67fe3f6e5ca3c8e8c83ca09811cb186bb1ae8acca3940d7f1f9233e9309c9185
GET /images/is6-4.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/png
Content-Length: 19659
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:56 GMT
Accept-Ranges: bytes
www.kimsnoodles.com/images/footer-deco.svg
200 OK 1.0 kB URL HTTP/1.1 www.kimsnoodles.com/images/footer-deco.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (484), with CRLF line terminators
Hash b40b395bb45734eda3d07fba45ce7cca
1ac3b2bceaf36017497fdcb32cb2b9fa4e58e764
6a1671bc17e31309d61ff61b495007bd0203bae37aa4d40900817fa3c3465b00
Analyzer Verdict Alert fortinet Phishing
GET /images/footer-deco.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:53 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/footer-wave-2.svg
200 OK 381 B URL HTTP/1.1 www.kimsnoodles.com/images/footer-wave-2.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1159), with CRLF line terminators
Hash d7c081e02c61ebb48b26d114e8923a99
e929766213c705380cf7a7a927226ca286d0a00c
9411deaeb163b685623e14f235b79a40678e1fb825ae60d6568062596b25ae27
Analyzer Verdict Alert fortinet Phishing
GET /images/footer-wave-2.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:53 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/footer-logo.svg
200 OK 43 kB URL HTTP/1.1 www.kimsnoodles.com/images/footer-logo.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (10921), with CRLF line terminators
Hash ce7f7c7cb06c16ca8a4d8053c288a3c9
0bce9b4fad8298ce750c04a2b2f2fd55ba4288bf
f8c609a32e0047e182c2134954ee71e519b7d57c1d29ec40cc5cb886530cddd8
Analyzer Verdict Alert fortinet Phishing
GET /images/footer-logo.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:53 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/bag.svg
200 OK 328 B URL HTTP/1.1 www.kimsnoodles.com/images/bag.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 2b9ee552060ea8b1fc2cfd71660d334e
a18b22c24b4536397bb4dd5918e2b4a51c910a74
431e23a7f938ac61b8a07d22adfb0568a94be73dea66be435bd8247ab5898265
Analyzer Verdict Alert fortinet Phishing
GET /images/bag.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:41 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/logo.svg
200 OK 38 kB URL HTTP/1.1 www.kimsnoodles.com/images/logo.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (12612), with CRLF line terminators
Hash 20c8ddcc67c761fbb1e275204b091f0a
044020c81819b6898e959d8da8b9f685f54d828e
d1a405017e2f60c3384d186a0b6af22c3d02516c8433d8bc2baa171559eed44d
Analyzer Verdict Alert fortinet Phishing
GET /images/logo.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:57 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/fb.svg
200 OK 597 B URL HTTP/1.1 www.kimsnoodles.com/images/fb.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (399), with CRLF line terminators
Hash 1902a4c0f7983a52d64595ce014d40bd
684e1cc42e7686f662de3179e89969f0834c915a
c063b57083f105d2f5c59bb82877fe5bca168d702a94f46d414279034fc690b9
Analyzer Verdict Alert fortinet Phishing
GET /images/fb.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:48 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/ig.svg
200 OK 524 B URL HTTP/1.1 www.kimsnoodles.com/images/ig.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d41b7d1fb95885f6be1e35e09c72ce48
06f715ad2ade85d4e4a212776e9f5be3c97ff709
7d9e36bec56b5e6bacb90c5f86537cc4696cf73378c4b4ca0d91a247f8921112
Analyzer Verdict Alert fortinet Phishing
GET /images/ig.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:54 GMT
Content-Encoding: gzip
www.kimsnoodles.com/images/bbgg-1.svg
200 OK 4.4 kB URL HTTP/1.1 www.kimsnoodles.com/images/bbgg-1.svg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1356), with CRLF line terminators
Hash c73639651ec64856d2aef79e399d8cb1
f0ca7b5d17cca24a86f9e5c19b1ebdbefcd522ca
52cc7c3b925ee2fb27ccb0455c637dadb221193fd70a0d4b4b1f8d5f028de877
Analyzer Verdict Alert fortinet Phishing
GET /images/bbgg-1.svg HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:53 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:28:41 GMT
Content-Encoding: gzip
unpkg.com/flickity-fade@1/flickity-fade.js
302 Found 0 B URL HTTP/2 unpkg.com/flickity-fade@1/flickity-fade.js
IP
GET /flickity-fade@1/flickity-fade.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 08:43:44 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /flickity-fade@1.0.0/flickity-fade.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJPZ9J712K1ZWA5C0XEAKCBJ-fra
cf-cache-status: HIT
age: 13
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f919300e8eb51b-OSL
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.1.1/lazysizes.min.js
200 OK 0 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/lazysizes/5.1.1/lazysizes.min.js
IP
GET /ajax/libs/lazysizes/5.1.1/lazysizes.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 2950
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed0-1b91"
last-modified: Mon, 04 May 2020 16:12:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3166223
expires: Wed, 15 Nov 2023 08:43:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8nUVb%2BHHnGbQXY%2BgUkg9WHD5nFb5b6RDzJSSR37IMD9pCHSshmx8JGEHLOtEZlw7gOdTfsnldGkykxQsL7onRQPQv8p7xaeryy9mOWjp0OTuAlgIdlyFK6uIinmvqA2lcAUakrDs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9192eac690b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/flickity-fade@1/flickity-fade.css
302 Found 0 B URL HTTP/2 unpkg.com/flickity-fade@1/flickity-fade.css
IP
GET /flickity-fade@1/flickity-fade.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 08:43:44 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /flickity-fade@1.0.0/flickity-fade.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJPZ25GKJDTC9GQF23D1GK0Y-ams
cf-cache-status: HIT
age: 255
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f9192ffe6ab51b-OSL
X-Firefox-Spdy: h2
www.kimsnoodles.com/images/animate/css_sprites-4.png
200 OK 0 B URL HTTP/1.1 www.kimsnoodles.com/images/animate/css_sprites-4.png
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
GET /images/animate/css_sprites-4.png HTTP/1.1
Host: www.kimsnoodles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kimsnoodles.com/stylesheets/style.css
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 08:43:46 GMT
Content-Type: image/png
Content-Length: 5062204
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 17 Feb 2022 04:29:11 GMT
Accept-Ranges: bytes
unpkg.com/flickity-fade@1.0.0/flickity-fade.css
200 OK 0 B URL HTTP/2 unpkg.com/flickity-fade@1.0.0/flickity-fade.css
IP
GET /flickity-fade@1.0.0/flickity-fade.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kimsnoodles.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"d3-O93RPgBa5RynRwlnsdxZ9jaUf1I"
via: 1.1 fly.io
fly-request-id: 01G4XEZWSW1HKM4QCXNCT4XYYH-fra
cf-cache-status: HIT
age: 14814712
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f919301ea2b51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/flickity-fade@1.0.0/flickity-fade.js
200 OK 0 B URL HTTP/2 unpkg.com/flickity-fade@1.0.0/flickity-fade.js
IP
GET /flickity-fade@1.0.0/flickity-fade.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kimsnoodles.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:44 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1a24-9mp2jFxVUomz8uJtJfxQWXMAtZU"
via: 1.1 fly.io
fly-request-id: 01F3YGTW0QJQ8TTTF986JA742P
cf-cache-status: HIT
age: 18676331
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f91930c823b51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/kenwheeler/slick@1.8.1/slick/slick.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/gh/kenwheeler/slick@1.8.1/slick/slick.min.js
IP
GET /gh/kenwheeler/slick@1.8.1/slick/slick.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kimsnoodles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 08:43:43 GMT
age: 20242104
x-served-by: cache-fra19126-FRA, cache-bma1629-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10429
X-Firefox-Spdy: h2
unpkg.com/vh-check@2.0.5/dist/vh-check.min.js
200 OK 0 B URL HTTP/2 unpkg.com/vh-check@2.0.5/dist/vh-check.min.js
IP
GET /vh-check@2.0.5/dist/vh-check.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.kimsnoodles.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:43:44 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"906-ysmZqyZMDFDWHogh/w+KQFGqWk0"
via: 1.1 fly.io
fly-request-id: 01F529ZN9BQ78Y463MB5CAFR5X
cf-cache-status: HIT
age: 17468054
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f91930f870b51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
103.1.220.17
93.184.220.29
104.17.25.14
151.101.85.229
142.250.74.164
23.36.76.226