Report - ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw

Report Overview

Visited public
2023-09-19 01:31:48
Tags
phishing
URL
ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Finishing URL
ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
IP / ASN
209.94.90.1
#40680 PROTOCOL
Title
FAMETECH
Phishing - Generic phishing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-09-18 21:53:21	424 B	31 kB	142.250.74.138
ipfs.io	41400	2014-05-16	2015-09-09 06:41:36	2023-09-18 00:25:29	1.0 kB	440 kB	209.94.90.1
fametech.com.tw	unknown	unknown	2014-12-03 16:27:00	2023-09-15 03:53:46	499 B	0 B	0.0.0.0
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15 22:36:43	2023-09-18 18:19:27	432 B	52 kB	104.18.10.207
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-09-18 18:12:08	1.7 kB	3.5 kB	216.58.207.195
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-09-03 06:47:12	446 B	821 B	142.250.74.132
t3.gstatic.com	unknown	2008-02-11	2013-05-06 22:15:36	2023-09-18 09:50:47	504 B	1.1 kB	142.250.74.100
ipfs.tech	unknown	2020-05-28	2021-02-03 22:11:02	2023-09-18 08:00:30	410 B	5.5 kB	143.244.56.51
ocsp.sectigo.com	487	2018-08-16	2019-11-29 12:50:24	2023-09-18 19:19:09	330 B	963 B	104.18.15.101

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-19 01:31:31	medium	Client IP	Internal IP	ET INFO Peer-to-Peer File Sharing Service Domain in DNS Lookup (ipfs .io)
2023-09-19 01:31:31	medium	Client IP	Internal IP	ET INFO Peer-to-Peer File Sharing Service Domain in DNS Lookup (ipfs .io)
2023-09-19 01:31:31	medium	Client IP	209.94.90.1	ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-09-05	medium	ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html	Generic/Spear Phishing

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-05-09
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 10:36 Times Seen173907 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	ScriptElement	51 kB	2023-03-07	2025-05-09
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 08:21 Times Seen98870 Hash 67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Loading...

	ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw	ScriptElement	4.4 kB	2024-08-21	2024-08-21
Pretty URL ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-21 06:23 Last Seen2024-08-21 06:23 Times Seen1 Hash 2328bc4999a3562dea85b2624286d041 a48e3d5ca3ed64cf9a43ddeb9da44b9690d93499 069ec78add42f8b40e8716ccbc35901ba9ac1d9cb401c6e64e44b3344849d5d5 Loading...

HTTP Transactions (14)

URL IP Response Size

ocsp.pki.goog/gts1c3

216.58.207.195

471 B

URL
ocsp.pki.goog/gts1c3
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
abdf8b53099dccf8d09dbfddf3de9ead
ae1e54f0d16df6b3c6c56a557b1d973b2d21e852
8e6598419100a6447e92e81214ae1277824289350a90fa89b3594f1288debcc0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 01:31:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.138

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT

File type
ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 17 Sep 2023 04:04:30 GMT
expires: Mon, 16 Sep 2024 04:04:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 163621
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.207.195

471 B

URL
ocsp.pki.goog/gts1c3
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
abdf8b53099dccf8d09dbfddf3de9ead
ae1e54f0d16df6b3c6c56a557b1d973b2d21e852
8e6598419100a6447e92e81214ae1277824289350a90fa89b3594f1288debcc0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 01:31:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ipfs.io/favicon.ico

209.94.90.1

166 B

URL GET
ipfs.io/favicon.ico
IP
209.94.90.1:0
ASN
#40680 PROTOCOL

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Certificate
IssuerLet's Encrypt
Subjectdweb.link
FingerprintDC:9D:6C:D8:0D:F2:9C:6C:A8:73:22:4E:0D:D5:B5:9B:81:78:F1:39
ValiditySat, 26 Aug 2023 17:15:50 GMT - Fri, 24 Nov 2023 17:15:49 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
166 B (166 bytes)
Hash
3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
server: openresty
date: Tue, 19 Sep 2023 01:31:31 GMT
content-type: text/html
content-length: 166
location: https://ipfs.tech/favicon.ico
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
access-control-expose-headers: Content-Range, X-Chunked-Output, X-Stream-Output
x-ipfs-lb-pop: gateway-bank2-fr2
x-bfid: d0cb9749a23f404cfadc2aadf4f2bc11
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.207.195

472 B

URL
ocsp.pki.goog/gts1c3
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
92a15348a22feb36b0226c56f9243648
269519b91eb941311112a2133c9f08714d405235
1cb3e158f67e534af13b24e4c9560f2622d6cdcd2e2344572e49d15a51ff74f5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 01:31:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/s2/favicons?domain=https://fametech.com.tw

142.250.74.132

301 Moved Permanently

336 B

URL GET HTTP/2
www.google.com/s2/favicons?domain=https://fametech.com.tw
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size
336 B (336 bytes)
Hash
7af395bd34b2f0f21ce5438dc2669d95
32142d548f48b6a372c37bec27a93b635786bf3a
c9102dc58897563776562563ca86db110eac5460acd38d918ec3f3497638af89

HTTP Headers

GET /s2/favicons?domain=https://fametech.com.tw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fametech.com.tw&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 01:31:31 GMT
expires: Tue, 19 Sep 2023 02:01:31 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 336
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.207.195

471 B

URL
ocsp.pki.goog/gts1c3
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
64ed688baf8887c3e918f1a762cdc5b2
057b28a887cac1050b7c08d5647a1e4d8b416ebf
267244dad1693002d314ef71cc0317d4d942c4740009aacafac6a6ab7900a712

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 01:31:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.207.195

472 B

URL
ocsp.pki.goog/gts1c3
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
85073dc38dce61b5a442199213e5e449
436a960500e7061a8bfa3cc3fa897efdaa3dcaa4
0215bd45a978d1802cb17ebe04b8f9b322e7e3b2f12cfbcd8bc61369aeeee040

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 01:31:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fametech.com.tw&size=16

142.250.74.100

200 OK

279 B

URL GET HTTP/2
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fametech.com.tw&size=16
IP
142.250.74.100:443
ASN
#15169 GOOGLE

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
279 B (279 bytes)
Hash
855f8cb3581081d825ed60e891531967
7140d758816aa3349f1b5dfd585162013e81849c
7cd42be057ca9cf74333571525b26a1cae3d1e005676fb95227c1195eed42f12

HTTP Headers

GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fametech.com.tw&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.fametech-pos.com/www/apps/smarty/tpl/default/images/touch_icon_60.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 279
date: Tue, 19 Sep 2023 01:31:31 GMT
expires: Tue, 26 Sep 2023 01:31:31 GMT
cache-control: public, max-age=604800
last-modified: Tue, 22 Feb 2022 23:51:02 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ipfs.tech/favicon.ico

143.244.56.51

4.1 kB

URL GET
ipfs.tech/favicon.ico
IP
143.244.56.51:0
ASN
#60068 Datacamp Limited

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Certificate
IssuerLet's Encrypt
Subjectipfs.tech
Fingerprint30:32:56:F1:72:70:7C:06:B9:5A:90:D8:77:ED:03:B1:38:20:27:FB
ValiditySun, 20 Aug 2023 18:59:40 GMT - Sat, 18 Nov 2023 18:59:39 GMT

File type
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
4.1 kB (4066 bytes)
Hash
ea7d143efe3c01de298f9f1130e8bce5
4672164fab3870dd901034abcf3d35998ac94dbe
94a9fefbbe42310c03ff1e52c1f753c21038805f632867ea78930a52c445a456

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ipfs.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ipfs.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 19 Sep 2023 01:31:31 GMT
content-type: image/x-icon
vary: Accept-Encoding
server: BunnyCDN-FR1-1074
cdn-pullzone: 1567618
cdn-uid: 070ccd6e-b4b0-4c90-b45a-e26d7534205d
cdn-requestcountrycode: NO
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: max-age=60, stale-while-revalidate=3600
etag: W/"QmULFXXZMtQ2wCXDU6L8d9R4bYiQi7GpENhhZFF7ctPJDT"
x-ipfs-path: /ipfs/bafybeic3p2pgh3a3usymucn4uzmdjchquan3e2xtzcnyar2yiz2gp55e5a/favicon.ico
x-ipfs-roots: bafybeic3p2pgh3a3usymucn4uzmdjchquan3e2xtzcnyar2yiz2gp55e5a,QmULFXXZMtQ2wCXDU6L8d9R4bYiQi7GpENhhZFF7ctPJDT
strict-transport-security: max-age=31536000; includeSubDomains
x-request-id: 08f95c12250ae337ece819824948614c
referrer-policy: strict-origin-when-cross-origin
content-security-policy: upgrade-insecure-requests
x-xss-protection: 0
x-content-type-options: nosniff
x-cache-status: MISS
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/17/2023 03:28:43
cdn-edgestorageid: 1072
cdn-status: 200
cdn-requestid: fab41f7c941db889d8b87bafca79f021
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.15.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
1fc19256ecf4aa21ea7e0f55aef158d2
9e301d48d4b855a74803397e934fafe6f80b51ef
d040ebf71ba2166e21fc300691faaa748fbd02be6fd8e0620f08ef42a3c9f894

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 19 Sep 2023 01:31:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 16 Sep 2023 18:44:57 GMT
Expires: Sat, 23 Sep 2023 18:44:56 GMT
Etag: "9e301d48d4b855a74803397e934fafe6f80b51ef"
Cache-Control: max-age=407003,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 808e11d4ae1856aa-OSL

fametech.com.tw/

0.0.0.0

0 B

URL GET
fametech.com.tw/
IP
0.0.0.0:0
ASN
#0

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: fametech.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html

209.94.90.1

200 OK

438 kB

URL User Request GET HTTP/2
ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html
IP
209.94.90.1:443
ASN
#40680 PROTOCOL

Certificate
IssuerLet's Encrypt
Subjectdweb.link
FingerprintDC:9D:6C:D8:0D:F2:9C:6C:A8:73:22:4E:0D:D5:B5:9B:81:78:F1:39
ValiditySat, 26 Aug 2023 17:15:50 GMT - Fri, 24 Nov 2023 17:15:49 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
438 kB (437723 bytes)
Hash
a570bbd8ec934c648f34d6f87398bc98
3fa149a60c47866dfe4366a7f06994d28b2e0f59
4ac5611125ffc02a74d1b93b66627d46cc262fa7991e0273fdf816d1d3326037

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Generic/Spear Phishing

HTTP Headers

GET /ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html HTTP/1.1
Host: ipfs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Tue, 19 Sep 2023 01:31:30 GMT
content-type: text/html
vary: Accept-Encoding
access-control-allow-methods: GET, HEAD, OPTIONS, GET, POST, OPTIONS
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreickyvqrcjp7yavhjunzhntge7kgzqtc7j4zdybhh7pyc3i5gmtag4"
x-ipfs-gateway-host: ipfs-bank8-fr2
x-ipfs-path: /ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html
x-ipfs-roots: bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4,bafkreickyvqrcjp7yavhjunzhntge7kgzqtc7j4zdybhh7pyc3i5gmtag4
x-ipfs-pop: ipfs-bank8-fr2
timing-allow-origin: *
x-ipfs-datasize: 437723
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
access-control-expose-headers: Content-Range, X-Chunked-Output, X-Stream-Output
x-ipfs-lb-pop: gateway-bank2-fr2
x-bfid: 9d640fe9adc71c7816ccff94657b86ac
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

104.18.10.207

200 OK

51 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ipfs.io/ipfs/bafybeie537wt3fl54om5bdd7vjii4rgwjk4tb66ngmefc43byl3tihsrx4/index.html#info@fametech.com.tw
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (50758)
Size
51 kB (51039 bytes)
Hash
67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

HTTP Headers

GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ipfs.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 19 Sep 2023 01:31:31 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 674, 718, 718
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 2021-06-08 05:11:08
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: d57b249fbc897a386cb949167a1340aa
cdn-cache: HIT
cf-cache-status: HIT
age: 1602342
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 808e11d0de9556c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type