app.claimpyusd.shop/phplist/lt.php?tid=ek0EV1dSUgFWURxWXwRQS1YHVA8fVVUHABsBVwZUUAcFCFJWBgBLB1FdCQYBVQdLUVEFVh8AVFBWG1QCVwQfVlcEA1MKVgcLX10HHgpVBlUEU1oAHwBVB1cbAQVQVx9ZCgRRTgEGA1FVUQRbCwQGXw
198.251.81.14 0 B URL app.claimpyusd.shop/phplist/lt.php?tid=ek0EV1dSUgFWURxWXwRQS1YHVA8fVVUHABsBVwZUUAcFCFJWBgBLB1FdCQYBVQdLUVEFVh8AVFBWG1QCVwQfVlcEA1MKVgcLX10HHgpVBlUEU1oAHwBVB1cbAQVQVx9ZCgRRTgEGA1FVUQRbCwQGXw
IP 198.251.81.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /phplist/lt.php?tid=ek0EV1dSUgFWURxWXwRQS1YHVA8fVVUHABsBVwZUUAcFCFJWBgBLB1FdCQYBVQdLUVEFVh8AVFBWG1QCVwQfVlcEA1MKVgcLX10HHgpVBlUEU1oAHwBVB1cbAQVQVx9ZCgRRTgEGA1FVUQRbCwQGXw HTTP/1.1
Host: app.claimpyusd.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
x-powered-by: PHP/7.4.33
set-cookie: phpListSession=12a46bbc8641f37484075c749c0a4c7e; path=/; HttpOnly; SameSite=Strict; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 18 Sep 2023 07:09:51 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
104.18.3.35 3.9 kB URL pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
IP 104.18.3.35:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (746), with CRLF line terminators
Hash 6b17ce32b251b082b8a9b65fa6a72de5
f4ef1d34266bf6b935ec5eaf24cf017e4f1392a3
658421f70f9c42abb430b0239f0e6b86b861a2d0ede64c6c3bd7410b71dc45ae
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /index.html HTTP/1.1
Host: pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:09:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6b17ce32b251b082b8a9b65fa6a72de5"
Last-Modified: Thu, 07 Sep 2023 17:12:17 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8087c40ecacf0b51-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
216.58.207.195 471 B IP 216.58.207.195:0
Hash ff33d3de59a166777a4beda54587e4e2
a77ea03d8bf2cb71319cb8bb98ceb9c97a3cb2f8
52cac5b4492606a61a686f2f1a6bccd02af5ac3e6c1ce5986ab284eae8dd8ba6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.207.195 471 B IP 216.58.207.195:0
Hash ff33d3de59a166777a4beda54587e4e2
a77ea03d8bf2cb71319cb8bb98ceb9c97a3cb2f8
52cac5b4492606a61a686f2f1a6bccd02af5ac3e6c1ce5986ab284eae8dd8ba6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
216.58.207.234200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 216.58.207.234:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 12 Sep 2023 21:21:03 GMT
expires: Wed, 11 Sep 2024 21:21:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 467329
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.207.195 471 B IP 216.58.207.195:0
Hash ff33d3de59a166777a4beda54587e4e2
a77ea03d8bf2cb71319cb8bb98ceb9c97a3cb2f8
52cac5b4492606a61a686f2f1a6bccd02af5ac3e6c1ce5986ab284eae8dd8ba6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.207.195 471 B IP 216.58.207.195:0
Hash ff33d3de59a166777a4beda54587e4e2
a77ea03d8bf2cb71319cb8bb98ceb9c97a3cb2f8
52cac5b4492606a61a686f2f1a6bccd02af5ac3e6c1ce5986ab284eae8dd8ba6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
104.18.3.35 3.9 kB URL pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
IP 104.18.3.35:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (746), with CRLF line terminators
Hash 6b17ce32b251b082b8a9b65fa6a72de5
f4ef1d34266bf6b935ec5eaf24cf017e4f1392a3
658421f70f9c42abb430b0239f0e6b86b861a2d0ede64c6c3bd7410b71dc45ae
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /index.html HTTP/1.1
Host: pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:09:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6b17ce32b251b082b8a9b65fa6a72de5"
Last-Modified: Thu, 07 Sep 2023 17:12:17 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8087c4137d330b51-OSL
Content-Encoding: gzip
kit.fontawesome.com/585b051251.js
104.18.22.52200 OK 4.7 kB URL GET HTTP/2 kit.fontawesome.com/585b051251.js
IP 104.18.22.52:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash bf167f679bfcda0d173ed3a8431d39a4
fed1a74bae66eff027af7a3b98249e117ecac2e9
9697dedb7ca6a92d45b6de80ce9ad6233264ac2c7eea9f3ea43a51a01d3b83ff
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F4PUyZJVAqtuwsNmKugh
cf-cache-status: HIT
server: cloudflare
cf-ray: 8087c411eb3856aa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=fametech.com.tw
142.250.74.132301 Moved Permanently 335 B URL GET HTTP/2 www.google.com/s2/favicons?domain=fametech.com.tw
IP 142.250.74.132:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 59520ca900c9212706977fd6574e6f36
7928be63fdb1c0cccf2e6a2835b8c9007ba28271
40904cdaa628f3778556cf323bc58a49aace862e5d1c872914343e7eb350e470
GET /s2/favicons?domain=fametech.com.tw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 18 Sep 2023 07:09:52 GMT
expires: Mon, 18 Sep 2023 07:39:52 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 335
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
172.64.130.9200 OK 78 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
IP 172.64.130.9:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data
Hash a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 4e17b9920844b6a8df812cad8c3506ec.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: ve9WuNt8_4YDv0C5uI0JbFtwHCauPzJpyFPvB_bE2CTuxId9GwBeRg==
age: 34468
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYXUKAZHqR0SxvZsYnLV69EJfps5hW4MdYcolPgPE%2F%2FdBUXdWoMOui8G1xNwsT%2Bqnv%2B352iSCjfrE3Tp1ZI1h1c7bKb6wTiFJgq9fx%2FbjWFkTTI4guyRUAOqnUjKgd6JqtKHuuyIKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8087c4158fe388b9-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/favicon.ico
104.18.3.35404 Not Found 6.5 kB URL GET HTTP/1.1 pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/favicon.ico
IP 104.18.3.35:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerLet's Encrypt
Subject*.r2.dev
FingerprintE8:0C:C2:4D:15:01:60:A8:F1:76:79:D2:4D:CB:27:19:C0:CF:60:B2
ValiditySun, 13 Aug 2023 17:25:54 GMT - Sat, 11 Nov 2023 17:25:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /favicon.ico HTTP/1.1
Host: pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 18 Sep 2023 07:09:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8087c4155e020b51-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
216.58.207.195 471 B IP 216.58.207.195:0
Hash 6d0836de7378bcfe6c380aa7242c582f
6832a56b6ce5feccce7175e29a381d3479e68c36
b7a6a07e3bfb203265ec8e732702ea913a5e70d7e9395c1a3652d0fff5e25af0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.207.195 472 B IP 216.58.207.195:0
Hash d281fce2707e4d03af467ca854f83111
b0c50454ec97b8dd15e1a1e15a6b203be9d4b6b9
78236e6ecac2a39afdfb01ec9cd2580b5fc0482757836cf13df046a8dea9b22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16
142.250.74.100 279 B URL t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16
IP 142.250.74.100:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 855f8cb3581081d825ed60e891531967
7140d758816aa3349f1b5dfd585162013e81849c
7cd42be057ca9cf74333571525b26a1cae3d1e005676fb95227c1195eed42f12
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.fametech-pos.com/www/apps/smarty/tpl/default/images/touch_icon_60.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 279
date: Mon, 18 Sep 2023 07:09:53 GMT
expires: Mon, 25 Sep 2023 07:09:53 GMT
cache-control: public, max-age=604800
last-modified: Tue, 22 Feb 2022 23:51:02 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.207.195 472 B IP 216.58.207.195:0
Hash d281fce2707e4d03af467ca854f83111
b0c50454ec97b8dd15e1a1e15a6b203be9d4b6b9
78236e6ecac2a39afdfb01ec9cd2580b5fc0482757836cf13df046a8dea9b22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:09:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
app.claimpyusd.shop/phplist/lt.php?tid=ek0EV1dSUgFWURxWXwRQS1YHVA8fVVUHABsBVwZUUAcFCFJWBgBLB1FdCQYBVQdLUVEFVh8AVFBWG1QCVwQfVlcEA1MKVgcLX10HHgpVBlUEU1oAHwBVB1cbAQVQVx9ZCgRRTgEGA1FVUQRbCwQGXw
198.251.81.14303 See Other 12 kB URL User Request GET HTTP/2 app.claimpyusd.shop/phplist/lt.php?tid=ek0EV1dSUgFWURxWXwRQS1YHVA8fVVUHABsBVwZUUAcFCFJWBgBLB1FdCQYBVQdLUVEFVh8AVFBWG1QCVwQfVlcEA1MKVgcLX10HHgpVBlUEU1oAHwBVB1cbAQVQVx9ZCgRRTgEGA1FVUQRbCwQGXw
IP 198.251.81.14:443
Certificate IssuerLet's Encrypt
Subjectapp.claimpyusd.shop
Fingerprint85:25:F6:79:52:CD:8E:3C:83:89:36:74:36:B3:60:F4:10:04:95:A5
ValidityTue, 29 Aug 2023 01:42:06 GMT - Mon, 27 Nov 2023 01:42:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /phplist/lt.php?tid=ek0EV1dSUgFWURxWXwRQS1YHVA8fVVUHABsBVwZUUAcFCFJWBgBLB1FdCQYBVQdLUVEFVh8AVFBWG1QCVwQfVlcEA1MKVgcLX10HHgpVBlUEU1oAHwBVB1cbAQVQVx9ZCgRRTgEGA1FVUQRbCwQGXw HTTP/1.1
Host: app.claimpyusd.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
x-powered-by: PHP/7.4.33
set-cookie: phpListSession=12a46bbc8641f37484075c749c0a4c7e; path=/; HttpOnly; SameSite=Strict; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 18 Sep 2023 07:09:51 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Yellowtail%26display=swap
142.250.74.106400 Bad Request 0 B URL GET HTTP/2 fonts.googleapis.com/css?family=Yellowtail%26display=swap
IP 142.250.74.106:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css?family=Yellowtail%26display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 18 Sep 2023 07:09:52 GMT
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.10.207200 OK 51 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP 104.18.10.207:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 674, 718, 718
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 2021-06-08 05:11:08
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: d57b249fbc897a386cb949167a1340aa
cdn-cache: HIT
cf-cache-status: HIT
age: 1536243
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8087c4125cd956a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
172.64.130.9200 OK 60 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
IP 172.64.130.9:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type ASCII text, with very long lines (60130)
Hash a12ec7ebe75a4d59a5dd6b79e2ba2e16
28f5dcc595ee6d4163481ef64170180502c8629b
fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda
GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Origin: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ed393405ff603a61a1e63909cf1c1a44.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 0ivEfoOeUIskgXIayRuoqamSvTr7avOGjqoMPJOugoYnN8rRoNI3Xw==
age: 34469
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=in61B%2B%2FMs%2Fp9w%2F7iSKrsLK8UTJyqAN1Rl7AQfXFn8ZFk9G5HDAqALL6Uyv%2BdRI3f3qe9P%2Fw2NS4jRIbh1wN9kGInRF%2Bm%2FTHEuT3qXtRuFkqhjjXGRZRrE51zamoBFty%2FFycVlNqenQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8087c4148df988b9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.fametech.com.tw/
0.0.0.0 0 B IP 0.0.0.0:0
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.fametech.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16
142.250.74.100200 OK 279 B URL GET HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16
IP 142.250.74.100:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 855f8cb3581081d825ed60e891531967
7140d758816aa3349f1b5dfd585162013e81849c
7cd42be057ca9cf74333571525b26a1cae3d1e005676fb95227c1195eed42f12
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://fametech.com.tw&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.fametech-pos.com/www/apps/smarty/tpl/default/images/touch_icon_60.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 279
date: Mon, 18 Sep 2023 07:09:53 GMT
expires: Mon, 25 Sep 2023 07:09:53 GMT
cache-control: public, max-age=604800
last-modified: Tue, 22 Feb 2022 23:51:02 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js
104.18.10.207200 OK 60 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js
IP 104.18.10.207:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (59729)
Hash 61f338f870fcd0ff46362ef109d28533
b3c116c65e6f053aaab45e5619a78ec00271a50f
5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548
GET /bootstrap/4.4.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"61f338f870fcd0ff46362ef109d28533"
last-modified: Mon, 25 Jan 2021 22:04:09 GMT
cdn-cachedat: 01/04/2023 07:40:19
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1075
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9301a5a2d647313302fb5ac2a475ffbc
cdn-cache: HIT
cf-cache-status: HIT
age: 257074
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8087c4124b331c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
172.64.130.9200 OK 27 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
IP 172.64.130.9:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint64:27:AB:CA:DB:24:8C:C9:87:09:13:04:21:49:9C:6A:4E:DD:97:93
ValiditySun, 10 Sep 2023 05:39:32 GMT - Sat, 09 Dec 2023 05:39:31 GMT
File type ASCII text, with very long lines (26500)
Hash 76f34b71fc9fb641507ff6a822cc07f5
73ed2f8f21cd40fb496e61306acbb5849d4dbff4
6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Origin: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 717666fbcd9eb8ed70d0f46dd99d0448.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: eTW-Xe2P-XSuKcdlUnKrTL-OF2SF9I5U-ya_Y4VRNOMtI4G5-WRUYQ==
age: 71462
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NL95E6KtE4WehxA7wIXQPXNiBKpLbDjCK8ygaqhU7Al7SFHfPE5agAqKfZWFEj2x9sXRQXJqgkDDz3yDKnjnPTOEUHD1v90sr%2F%2F7mq0Z6zraRXg0fW0YgHLrqNEdPH9LvZDD%2BNx39g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8087c4148dfc88b9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
0.0.0.0 0 B URL GET pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
IP 0.0.0.0:0
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerLet's Encrypt
Subject*.r2.dev
FingerprintE8:0C:C2:4D:15:01:60:A8:F1:76:79:D2:4D:CB:27:19:C0:CF:60:B2
ValiditySun, 13 Aug 2023 17:25:54 GMT - Sat, 11 Nov 2023 17:25:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /index.html HTTP/1.1
Host: pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
104.18.3.35200 OK 12 kB URL User Request GET HTTP/1.1 pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
IP 104.18.3.35:443
Certificate IssuerLet's Encrypt
Subject*.r2.dev
FingerprintE8:0C:C2:4D:15:01:60:A8:F1:76:79:D2:4D:CB:27:19:C0:CF:60:B2
ValiditySun, 13 Aug 2023 17:25:54 GMT - Sat, 11 Nov 2023 17:25:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (746), with CRLF line terminators
Hash 6b17ce32b251b082b8a9b65fa6a72de5
f4ef1d34266bf6b935ec5eaf24cf017e4f1392a3
658421f70f9c42abb430b0239f0e6b86b861a2d0ede64c6c3bd7410b71dc45ae
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /index.html HTTP/1.1
Host: pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:09:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6b17ce32b251b082b8a9b65fa6a72de5"
Last-Modified: Thu, 07 Sep 2023 17:12:17 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8087c40ecacf0b51-OSL
Content-Encoding: gzip
stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
104.18.10.207200 OK 160 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
IP 104.18.10.207:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65324)
Size 160 kB (159515 bytes)
Hash 7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6
GET /bootstrap/4.4.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:09:52 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7cc40c199d128af6b01e74a28c5900b0"
last-modified: Mon, 25 Jan 2021 22:04:09 GMT
cdn-cachedat: 08/11/2023 21:52:15
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 549c4889e617e022f8ce6416649b43e2
cdn-cache: HIT
cf-cache-status: HIT
age: 7916
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8087c4125b3f1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
104.18.3.35200 OK 12 kB URL GET HTTP/1.1 pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
IP 104.18.3.35:443
Requested by https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html#info@fametech.com.tw
Certificate IssuerLet's Encrypt
Subject*.r2.dev
FingerprintE8:0C:C2:4D:15:01:60:A8:F1:76:79:D2:4D:CB:27:19:C0:CF:60:B2
ValiditySun, 13 Aug 2023 17:25:54 GMT - Sat, 11 Nov 2023 17:25:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (746), with CRLF line terminators
Hash 6b17ce32b251b082b8a9b65fa6a72de5
f4ef1d34266bf6b935ec5eaf24cf017e4f1392a3
658421f70f9c42abb430b0239f0e6b86b861a2d0ede64c6c3bd7410b71dc45ae
Analyzer Verdict Alert OpenPhish phishing Generic/Spear Phishing
GET /index.html HTTP/1.1
Host: pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f8c8aafffd0445f2913ad5fb8109d37d.r2.dev/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:09:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6b17ce32b251b082b8a9b65fa6a72de5"
Last-Modified: Thu, 07 Sep 2023 17:12:17 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8087c4137d330b51-OSL
Content-Encoding: gzip