Report - oohlalove.com.tw/step1.php

Report Overview

Submitted URL

oohlalove.com.tw/step1.php
IP

103.17.8.51

ASN

#131149 Yuan-Jhen Info., Co., Ltd
Submitted

2022-10-24T22:50:32Z

Access
Website Title
Final URL
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

31

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3187	63150	34.120.237.76
ocsp.pki.goog (3)	175	2018-07-01T08:43:07Z	2023-03-10T05:11:10Z	993	2100	142.250.74.35
r3.o.lencr.org (5)	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	1630	4434	23.36.77.32
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	321	229	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	594	127	52.39.57.61
ocsp.digicert.com (3)	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	987	2007	93.184.220.29
cdnjs.cloudflare.com (1)	235	2015-04-17T22:46:33Z	2023-03-10T08:04:05Z	381	30722	104.17.25.14
www.googletagmanager.com (3)	75	2013-05-22T04:07:37Z	2023-03-10T10:58:09Z	1038	103701	142.250.74.168
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	758	2778	143.204.55.36
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	401	5843	34.160.144.191
oohlalove.com.tw (94)	unknown	2019-05-12T03:14:22Z	2023-02-27T12:22:20Z	30330	1938578	103.17.8.51

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-10-23	medium	oohlalove.com.tw/step1.php	FedEx Corporation

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-24	medium	oohlalove.com.tw/step1.php	Phishing
2022-10-24	medium	oohlalove.com.tw/js/jquery.easing.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/EasePack.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/jquery.bxslider/jquery.bxslider.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/bootstrap.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/fancyapps-fancyBox/lib/jquery.mousewheel-3.0.6.pack.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/fancyapps-fancyBox/source/jquery.fancybox.pack.js?v=2.1.5	Phishing
2022-10-24	medium	oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.css?v=1.0.5	Phishing
2022-10-24	medium	oohlalove.com.tw/js/bootstrap-datepicker/js/bootstrap-datepicker.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-media.js?v=1.0.6	Phishing
2022-10-24	medium	oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.js?v=1.0.7	Phishing
2022-10-24	medium	oohlalove.com.tw/js/jquery.form.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/jquery.validate.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/jquery.scrollTo-min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/menu.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/resize.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/Exceptionless.JavaScript/dist/exceptionless.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/waypoints.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/TweenMax.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/supersized.3.2.6.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/supersized.shutter.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/js/CSSPlugin.min.js	Phishing
2022-10-24	medium	oohlalove.com.tw/img/i1.svg	Phishing
2022-10-24	medium	oohlalove.com.tw/img/i2.svg	Phishing
2022-10-24	medium	oohlalove.com.tw/img/i3.svg	Phishing
2022-10-24	medium	oohlalove.com.tw/img/i1_over.svg	Phishing
2022-10-24	medium	oohlalove.com.tw/img/i2_over.svg	Phishing
2022-10-24	medium	oohlalove.com.tw/img/i3_over.svg	Phishing
2022-10-24	medium	oohlalove.com.tw/upload_image/homeBanners/homeBanners_372.jpg?0.74726	Phishing
2022-10-24	medium	oohlalove.com.tw/upload_image/homeBanners/homeBanners_463.jpg?0.36484	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

HTTP Transactions (120)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.36

200 OK

939

URL HTTP/1.1

firefox.settings.services.mozilla.com/v1/
IP

143.204.55.36:0
ASN

#16509 AMAZON-02

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

cd8d0809aa5948f2a6ee41d2158861af

098cd24ac587cdc70137af412678526de4d43969

88e6741d6bf076bf7132c7cf98456702cc775476095aafd839888edff52fb03e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 24 Oct 2022 21:53:04 GMT
Expires: Mon, 24 Oct 2022 22:03:00 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hdiPd-eKurvkXY5Ofm4q-RIeVzaezGTEw-3A0q15xXSGJClt-srdxA==
Age: 3436

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

73c4166ca864f777db2cc1cd8658a7c2

c56b66b0b7c8516d4d5bfafe0c166711c78f3d25

310c633350812c064e159275b6dbbdba6d6a5991a54ccfcc23459320c6513572

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "310C633350812C064E159275B6DBBDBA6D6A5991A54CCFCC23459320C6513572"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10261
Expires: Tue, 25 Oct 2022 01:41:21 GMT
Date: Mon, 24 Oct 2022 22:50:20 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

cecd3b2e0cd07173ee1fb63b0a744119

774e0935fffd5bb39799c040098e32c3dc88702f

78c2c60f2d752f572f1711e23aa3f82d5e5bce1940064405f6f989886f6315df

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "78C2C60F2D752F572F1711E23AA3F82D5E5BCE1940064405F6F989886F6315DF"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2329
Expires: Mon, 24 Oct 2022 23:29:09 GMT
Date: Mon, 24 Oct 2022 22:50:20 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

67d5a988edcda47bc3b3b3f65d32b4b6

d4f0e0da8b3690cc7da925026d3414b68c7d954f

55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: zMDcSEUX9tND6naqRsniaJsFRXuFDngPY4VOXZy2B8km0nRMCyNRL79th00lJnXBgLR6zlpfg6I=
x-amz-request-id: GKF3WZ1ZC5T274DJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 22:38:33 GMT
age: 707
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 22:50:20 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

oohlalove.com.tw/step1.php

103.17.8.51

200 OK

13538

URL HTTP/1.1

oohlalove.com.tw/step1.php
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (634), with CRLF, LF line terminators

Size

13538
Hash

25bcc8fdca632f6f9706d2a265170059

3b1f3e27386bdf7ac1cf0f1cc7ecf35874bfc5af

18a2f2d043d121b576257ccd557b48fa2109c9e520f150316fa56bdc845a0593

Detections

Analyzer	Verdict	Alert
openphish	FedEx Corporation
fortinet	Phishing

HTTP Headers

                                        GET /step1.php HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:21 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

6f8923631d6f6f443fb0cb48eb719ad3

dc3cd4693ab796392aa172ad765d422091283f5d

6333ac05f2b0fead32009387e072e7a59b4f380cbf7a382f44b0d5137e9e2bb8

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6229
Cache-Control: max-age=166708
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 22:50:21 GMT
Etag: "6356e68c-117"
Expires: Wed, 26 Oct 2022 21:08:49 GMT
Last-Modified: Mon, 24 Oct 2022 19:25:00 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

cdnjs.cloudflare.com/ajax/libs/jquery/1.11.1/jquery.min.js

104.17.25.14

200 OK

29910

URL HTTP/2

cdnjs.cloudflare.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP

104.17.25.14:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (32086)

Size

29910
Hash

efa22a5e53ffbbb067d6518ade3ee6b9

7cf367e793b8032af31d0738d767f55b0938f8a2

a34cba69fe02aa2d90e3395cffc576730945df0f55e09b809e8dfb2b4693d2c7

HTTP Headers

                                        GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://oohlalove.com.tw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Mon, 24 Oct 2022 22:50:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 29910
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1762a"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15626125
expires: Sat, 14 Oct 2023 22:50:21 GMT
accept-ranges: bytes
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75f6455b6c6d0afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

oohlalove.com.tw/css/supersized.shutter.css

103.17.8.51

200 OK

1253

URL HTTP/1.1

oohlalove.com.tw/css/supersized.shutter.css
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (2478)

Size

1253
Hash

6d4fc8fffb9c5212805923d9a9d1e627

a48e4785aa1d9dd43e24228973e64d613abe3265

da0a42d4ddd63e675ff5d2ec8444bb67d2c0a723af5d3997e6236c7c98165005

HTTP Headers

                                        GET /css/supersized.shutter.css HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:48 GMT
Content-Encoding: gzip

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.36

200 OK

329

URL HTTP/1.1

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

143.204.55.36:0
ASN

#16509 AMAZON-02

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 24 Oct 2022 22:33:32 GMT
Expires: Mon, 24 Oct 2022 22:58:55 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YtoCoiHFfN-X2VPSszgDo6uegilAT20gQP1cbro9mP_HoSeUR5kNTA==
Age: 1009

oohlalove.com.tw/css/supersized.css

103.17.8.51

200 OK

745

URL HTTP/1.1

oohlalove.com.tw/css/supersized.css
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

745
Hash

2ce9cff33ab764659d687a486bb5ecc9

da205cfa20c43290e62b4cae78bb78995df78ea3

4113215ea5f2221f261ce6b6c92c3ae87e11e264ccae63d759c6649974136b74

HTTP Headers

                                        GET /css/supersized.css HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:48 GMT
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

7c6fdc8e76ef5875b5c965ade2df503e

45d548aa2a9d7ede163743274790700878eaea62

d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3820
Cache-Control: max-age=123604
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 22:50:21 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 09:10:25 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

6f8923631d6f6f443fb0cb48eb719ad3

dc3cd4693ab796392aa172ad765d422091283f5d

6333ac05f2b0fead32009387e072e7a59b4f380cbf7a382f44b0d5137e9e2bb8

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6229
Cache-Control: max-age=166708
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 22:50:21 GMT
Etag: "6356e68c-117"
Expires: Wed, 26 Oct 2022 21:08:49 GMT
Last-Modified: Mon, 24 Oct 2022 19:25:00 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

push.services.mozilla.com/

52.39.57.61

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

52.39.57.61:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JsXV0wX1Gl+fBHzG14pupA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rPmlqRGINzzG/Jcp5BQkHn4JmxI=

oohlalove.com.tw/js/jquery.easing.min.js

103.17.8.51

200 OK

1990

URL HTTP/1.1

oohlalove.com.tw/js/jquery.easing.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ISO-8859 text, with very long lines (3601)

Size

1990
Hash

bd8d83da46891e7cb21763583bf1432e

e8464de2a8beb844046eca76af7714dafbaf96dd

408d38b4065542adffcf5852d19d61892ffdb7192155127fe46e89aa7b08194f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/jquery.easing.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/EasePack.min.js

103.17.8.51

200 OK

2019

URL HTTP/1.1

oohlalove.com.tw/js/EasePack.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (4695)

Size

2019
Hash

3df122847c81429ba306176438cf3101

07efaa6c465ca6c5e434c48061e9473ba1ed6518

78211b88b181df3031c821b692f07aef10d8d726f6921bf955f3c981212e5904

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/EasePack.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/jquery.bxslider/jquery.bxslider.min.js

103.17.8.51

200 OK

5782

URL HTTP/1.1

oohlalove.com.tw/js/jquery.bxslider/jquery.bxslider.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (19040)

Size

5782
Hash

cda87c77ce1510e95b31655b14d14608

47cc2fa1c5c3bd31f3c46fa2c93c5623a2df07e9

a860bc6f92b0a40849a024d081e1b9e74c465fff5d22f3ccc657d24dc61f3707

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/jquery.bxslider/jquery.bxslider.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/jquery.bxslider/jquery.bxslider.css

103.17.8.51

200 OK

1332

URL HTTP/1.1

oohlalove.com.tw/js/jquery.bxslider/jquery.bxslider.css
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

1332
Hash

cde35a27c5d5cf5eaf8ee23bcc87c2c5

499445579094c93b63b43225959aefe09c75913b

1e9d8edf1a6ff22aeceeb0c853f3ab1324915cdfbcff0628fc0cae48ba887073

HTTP Headers

                                        GET /js/jquery.bxslider/jquery.bxslider.css HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:44 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/bootstrap-datepicker/css/datepicker3.css

103.17.8.51

200 OK

3069

URL HTTP/1.1

oohlalove.com.tw/js/bootstrap-datepicker/css/datepicker3.css
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with CRLF line terminators

Size

3069
Hash

dfdeb71e4d279af3bcc3d5ebde11e81b

95b959cbc1ca5b2e619491b7fa6ecc858d2e707c

de4fc5b693391f60f8402e7a2b59bdfb3a6542737e2e15acc464fb48ae61f298

HTTP Headers

                                        GET /js/bootstrap-datepicker/css/datepicker3.css HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Wed, 14 Oct 2020 10:05:26 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/bootstrap.min.css

103.17.8.51

200 OK

21968

URL HTTP/1.1

oohlalove.com.tw/js/bootstrap.min.css
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (65371)

Size

21968
Hash

041c80587538120122cb5000dfd0d173

8f887d7f73471a74efecb074ff4ce6a5692a30c4

8ca426a2e9e54c0f227882c026142e15199d824b820d3b41257cc539e38a9f9c

HTTP Headers

                                        GET /js/bootstrap.min.css HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:44 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/bootstrap.js

103.17.8.51

200 OK

14874

URL HTTP/1.1

oohlalove.com.tw/js/bootstrap.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

14874
Hash

c6d576976461016e742a4d6ed20e3af1

5257675e2efb30c4d3e95db31ebaa9d967a26cb6

6c83fd3b7880505e375f5c4e1ff194eb3c5083e2a9c84aef4557f44d4aaf8c1b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/bootstrap.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/lib/jquery.mousewheel-3.0.6.pack.js

103.17.8.51

200 OK

723

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/lib/jquery.mousewheel-3.0.6.pack.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (524)

Size

723
Hash

fb9d3b16e1bdb0bbb69424eca7f4d8f7

9e9f7babf7f9b77c15542d551fb2e8bf2f5cdb16

56904957c1e84689fbccb4634c20efde73c57b4fbbae513b138b017eff928da7

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/fancyapps-fancyBox/lib/jquery.mousewheel-3.0.6.pack.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:57 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/jquery.fancybox.css?v=2.1.5

103.17.8.51

200 OK

1556

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/jquery.fancybox.css?v=2.1.5
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

1556
Hash

5af29f2cbf82dbd2295eefef58ed7a8f

c8ce9f027e520bb8a521fc18d8e8ce1aece2d718

177dfe40b91749f8241fe3a83c0cb3d6dca079d5bc9895b118fd2239b9308c21

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/jquery.fancybox.css?v=2.1.5 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:44 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/jquery.fancybox.pack.js?v=2.1.5

103.17.8.51

200 OK

9457

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/jquery.fancybox.pack.js?v=2.1.5
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (645)

Size

9457
Hash

57dc46a1945b956ea22af6bbb47e027e

ab8037729a66f5a0812f22bb1eb3640ff0142fa0

7248c5c047997dc4dc0407e9654c58a63523286b8d96cd682650272f2f772bc3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/jquery.fancybox.pack.js?v=2.1.5 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:57 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.css?v=1.0.5

103.17.8.51

200 OK

785

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.css?v=1.0.5
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

785
Hash

fe461dca9db2cf777960c07b96db679b

2cf8fca9d604ff2ecf6148b2c8c50ab8294e429a

4057c8eecbdc29da553d944047a1a9bff12f69418fb6cd11d6365173caa65896

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.css?v=1.0.5 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:44 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/bootstrap-datepicker/js/bootstrap-datepicker.js

103.17.8.51

200 OK

17497

URL HTTP/1.1

oohlalove.com.tw/js/bootstrap-datepicker/js/bootstrap-datepicker.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with CRLF line terminators

Size

17497
Hash

4de0cd66f4606e1b53b32a1aaeb6c808

0e759309ad8b0f2b93b7f76e1a966f7a9737ce14

fb32ee03b99343f3e005c5735af1c87de6d674e82277bf3e4590a6234246ace8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/bootstrap-datepicker/js/bootstrap-datepicker.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:56 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.js?v=1.0.5

103.17.8.51

200 OK

1135

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.js?v=1.0.5
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (411)

Size

1135
Hash

d5094de093e5a0f55707ce33ee7967ab

61a7c7d9ea44ff3b1d978b7ac1279c121377b08f

86671f09363fe277214e490707f9698f58c248938939c44a9aa3081e672a28c7

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/helpers/jquery.fancybox-buttons.js?v=1.0.5 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:57 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-media.js?v=1.0.6

103.17.8.51

200 OK

2090

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-media.js?v=1.0.6
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

2090
Hash

32e1b1ee35ff910a56594975ff0b52a4

445d090551a6f8cc765671347e71937356289ba3

5e2d15536e1951f03d4e5072fa28e7d463c90195ab74448abf3d6d2abeccccbd

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/helpers/jquery.fancybox-media.js?v=1.0.6 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:57 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.css?v=1.0.7

103.17.8.51

200 OK

316

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.css?v=1.0.7
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

316
Hash

f0b83d105535d9f95151449ea20de2b6

c3dcd0b6d0cc274cd0e07157c7ae13c68bf6100f

01258bb6def0fac4b697da1abe8b4b7d757ca18b3bb813d240893d3d1aa09327

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.css?v=1.0.7 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:44 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.js?v=1.0.7

103.17.8.51

200 OK

1578

URL HTTP/1.1

oohlalove.com.tw/js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.js?v=1.0.7
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

1578
Hash

c88eb56f099ae39766a68b10dbb98644

df2835feb84cc2c4ef9d1e77b2e2ac4c0fe9ec04

b6425b28882e32cabfa07119222627fe2c77844490d681c7e3efc5fb436ef47a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/fancyapps-fancyBox/source/helpers/jquery.fancybox-thumbs.js?v=1.0.7 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:57 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/jquery.form.js

103.17.8.51

200 OK

13901

URL HTTP/1.1

oohlalove.com.tw/js/jquery.form.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

13901
Hash

e44a6b3cc59b047123f520a4752c3183

817997a957eb5ff7dc35b6fea7d5e6fc19fd2977

707c5905e5f688aadaacb0d72de86037e1ee398149e48c9fe3dbeff209dc49a5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/jquery.form.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/jquery.validate.js

103.17.8.51

200 OK

13170

URL HTTP/1.1

oohlalove.com.tw/js/jquery.validate.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

Unicode text, UTF-8 text, with very long lines (1243)

Size

13170
Hash

5a38f8fe5606cbccd52916e61201b50b

0f902b53d09518489224cbede087b2323da8666d

d2c3e2db27c4dee23b1be527df0ab8139bda3d836bf5138789d10500efd9271b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/jquery.validate.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/jquery.scrollTo-min.js

103.17.8.51

200 OK

1334

URL HTTP/1.1

oohlalove.com.tw/js/jquery.scrollTo-min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

Unicode text, UTF-8 text, with very long lines (2272)

Size

1334
Hash

9c7e9d2ca7fc8ddd850429086c41a8d2

45d77cdbfd0e496605d5f5c2ff8ee1f4a684f4aa

26344d72664372fee79d92788d3c477de8f9f61ea72f31dcd082f66eb3937513

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/jquery.scrollTo-min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/style_goods.css?0.2

103.17.8.51

200 OK

6722

URL HTTP/1.1

oohlalove.com.tw/style_goods.css?0.2
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

Unicode text, UTF-8 text

Size

6722
Hash

a9d08ff39db8e4fbea30c2ff47714a0d

c3b71eb3e844371c21bbc6341720fc1ab2689133

58ef668b76d59f9eb8c665949642959e416cdaf10c7e8dcb5c426db241e1c9df

HTTP Headers

                                        GET /style_goods.css?0.2 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Wed, 19 May 2021 10:58:21 GMT
Content-Encoding: gzip

oohlalove.com.tw/less/announcement.css?0.1

103.17.8.51

200 OK

741

URL HTTP/1.1

oohlalove.com.tw/less/announcement.css?0.1
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

Unicode text, UTF-8 text

Size

741
Hash

501f455aa2ff05de72038e8d979c13e9

0db4edc0c40488e25f0840ac7cac3be0ddcf6416

7ea7b7353c79c39b57347e5f5f6e81939a05a45dde445a643b735e91e302f5f5

HTTP Headers

                                        GET /less/announcement.css?0.1 HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 19 Jun 2020 08:00:37 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/menu.js

103.17.8.51

200 OK

594

URL HTTP/1.1

oohlalove.com.tw/js/menu.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

Unicode text, UTF-8 text

Size

594
Hash

e004fca3bd5d9a8610c0e16158d1655a

970d45c872fa0ae0a858187bab105606db8b531a

da62125e526b477038e111cdf863bb1622bada4cd452624fd84aad16a693048b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/menu.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

398e3c90084d7d71fc1e9fd833116f5f

3e202da5559a8f219144adee3639d063a98559c0

724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14697
Expires: Tue, 25 Oct 2022 02:55:19 GMT
Date: Mon, 24 Oct 2022 22:50:22 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

398e3c90084d7d71fc1e9fd833116f5f

3e202da5559a8f219144adee3639d063a98559c0

724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14697
Expires: Tue, 25 Oct 2022 02:55:19 GMT
Date: Mon, 24 Oct 2022 22:50:22 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

398e3c90084d7d71fc1e9fd833116f5f

3e202da5559a8f219144adee3639d063a98559c0

724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14697
Expires: Tue, 25 Oct 2022 02:55:19 GMT
Date: Mon, 24 Oct 2022 22:50:22 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg

34.120.237.76

200 OK

9209

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

9209
Hash

89448f1a52030b28e9ecfcdc190787d4

5080ba75c230fd2b303f29a9b64868c6e8771df8

10a736997d441e274a54e9689c349d407087fef7aa7c0f4d0a7a603e446fdabd

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-length: 9209
x-amzn-requestid: 94dad7b4-9c12-4bda-9202-3b7427185182
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLiElGzEIAMFnOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e16e9-3c79cd392d5bc4312a730cda;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 03:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c5_B2RXKJx7FHrQvHdCG50zcDFWUqaaZu0GYuCxEI8fpK019dSlD3Q==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:32:19 GMT
age: 1083
etag: "5080ba75c230fd2b303f29a9b64868c6e8771df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11622

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33fda234-9118-4b4b-86d9-02c36810eda5.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

11622
Hash

b949df0edd9d64aa962e3bf4b267889e

3ef04f8c638dddf8bb8b70aae74770892307c814

e6c42bdd84bc9661c25a201599c29257b843d86d638ec479e7b5fa7bf81bc961

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33fda234-9118-4b4b-86d9-02c36810eda5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 11622
x-amzn-requestid: 2d6c3eb8-6a67-40bb-b970-a92caf783a4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYPSZFWpoAMFU1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63532c0f-14a2cd9f68bda5a01a765a2d;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 23:32:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _AwDcPb8X7mPlOseeJZxw4kaQsR4d_HDyqEUM7I4RfurX2iDap87YA==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 04:01:00 GMT
age: 67762
etag: "3ef04f8c638dddf8bb8b70aae74770892307c814"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11916

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

11916
Hash

1f22a424f72f369a3511d6af25d67a82

e9aabd2daee2d2e6265a69e309542c5b5983d1f2

600f1a4989fe65b14cfe5234c8bc723834d53543026c13eaf8217b22d3a3a9a9

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ac739ea-5d5d-4900-8e3f-c815c25f5c8d.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 11916
x-amzn-requestid: 01915cb4-17aa-4fd6-95fc-384cf3daf698
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ahf6ZGnvIAMFQ8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6356e042-2bb80aca19d6c0ff133c75b7;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 18:58:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9ZJ7byRMNo0XYgeiiX8ntoPWazlzeVUn7nm4BvDhMppzqtAVpisATQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 20:31:12 GMT
age: 8350
etag: "e9aabd2daee2d2e6265a69e309542c5b5983d1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7361

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

7361
Hash

01dacddfb62128799a20e0541bf5a18c

1bb8047c270b76c9dfcd8dba4a63b25c7604f03d

65f5c51b84ff7a131a3a695142ae9d82a73a516792abdd2d137714a1a3cf3bb5

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 7361
x-amzn-requestid: e0f20463-79ba-4eec-b7f5-adbe39995a00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYvMsGpjIAMFyIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63535f1d-79afe3a37142b5743a499e36;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 03:10:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QxySJ74mvhz9JJK3s-uBK87yNZE4DRbrMann1Kfu8Rk3W_tsNeKTdg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 04:24:34 GMT
age: 66348
etag: "1bb8047c270b76c9dfcd8dba4a63b25c7604f03d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7977

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

7977
Hash

80bab61eeda285e378b86b3efc4f87f9

5c690531e195332c04092ce22e7bdcecccc3c9d5

0c4dec046835501b598b5165acd592c3baeb2d6e21b6ac5fd549e790a802cd02

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 7977
x-amzn-requestid: 3e217877-33a2-4efc-a21f-b75764a8ced9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3FWGRooAMFagw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570555-2bc77cb653ef022b4aab7f71;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H9SrkX9dE_JU-7hTyxvpc7a2fQNo_WaeSxT5r3P63tu28yjFahtnXQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:42:39 GMT
age: 4063
etag: "5c690531e195332c04092ce22e7bdcecccc3c9d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8735

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8735
Hash

8502c90bf679dce29b1c2a87606bbb3e

7940c911dea3882ab8a7ff70240f4edc1b89a56d

ccc5ab3068b7f90276124148a812eb26951a95d7c146bdcf28a69a3d05f76ee2

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: 51dfaabc-ee88-465f-8da7-fd6739cf7794
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aZSHjHeLIAMF8mQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635396fc-1e4ad2d647a7f07a094574be;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 07:08:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dgxcF8hXUOo_WqQwpd0yctMNPuB-IfmSRxD1_TRG7zuV3b5EbpVIig==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 07:28:23 GMT
age: 55320
etag: "7940c911dea3882ab8a7ff70240f4edc1b89a56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

oohlalove.com.tw/js/resize.js

103.17.8.51

200 OK

522

URL HTTP/1.1

oohlalove.com.tw/js/resize.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text

Size

522
Hash

141cf9108c26b0e7bd9b332c5b08cd34

dc793451ee45770ce89f7753a1f4ffed92eec9a1

73a860d2ded377b3d4aa064ab9001030c889e1e448c0a962fe05f9b7f8e88839

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/resize.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/Exceptionless.JavaScript/dist/exceptionless.min.js

103.17.8.51

200 OK

13136

URL HTTP/1.1

oohlalove.com.tw/js/Exceptionless.JavaScript/dist/exceptionless.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (32003)

Size

13136
Hash

3a4fff0c2e890e48a8cda7ed59467ee3

2bddec6cff48e40b538ee98ea9e4bf2ccc288bed

63fe9aa0107c34ee55d543c061c73f3bda0dbb9e8630724918f6c081317f12b8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/Exceptionless.JavaScript/dist/exceptionless.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:55 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/waypoints.min.js

103.17.8.51

200 OK

2816

URL HTTP/1.1

oohlalove.com.tw/js/waypoints.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (7828)

Size

2816
Hash

08acc2c25b90c696eff26b4e1b81ab25

e78e4ca7e7f40d8d0ab342edc9a0f20f9eedca6f

412ead311ebca0563ccbf5ad76435d3833ebf4377ffda7823bf3849e66779f61

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/waypoints.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/reset.css

103.17.8.51

200 OK

468

URL HTTP/1.1

oohlalove.com.tw/reset.css
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

Unicode text, UTF-8 (with BOM) text

Size

468
Hash

a4edba67eaa63d20c3010d28a3bc6f70

8afffbbd789ed6108ba62e749aa2ec7bca880b5c

d49e459d638af3770cde4fe75a338a61f7ec6c6489a3218ea298c08e62ad68e2

HTTP Headers

                                        GET /reset.css HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/style_goods.css?0.2

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 18 Dec 2014 09:47:52 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/TweenMax.js

103.17.8.51

200 OK

102073

URL HTTP/1.1

oohlalove.com.tw/js/TweenMax.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (1014)

Size

102073
Hash

925a7a698a8b8714ba46fa97a2f10670

6e1d080adc6d605a99749aa40f701624385ff101

762b4f66a0ea5ecc71bb7ca78eefbb159768d46fa7a9b02588949c178af32a75

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/TweenMax.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/supersized.3.2.6.min.js

103.17.8.51

200 OK

4007

URL HTTP/1.1

oohlalove.com.tw/js/supersized.3.2.6.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (18302)

Size

4007
Hash

5096132adb2eca91f038272c0cb80221

be271e6653b9a0374363f9e062fded63eb9f4a8a

3ae0bd496844f5a469ad8356587de332d882d35db2b4442e7766f31c7388195d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/supersized.3.2.6.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/supersized.shutter.min.js

103.17.8.51

200 OK

1880

URL HTTP/1.1

oohlalove.com.tw/js/supersized.shutter.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (7159)

Size

1880
Hash

00246058885809d60a456e0937f11f98

26f1038a329459393c8d5a68c803b5f73f597d8d

1eab764fbb4aa19d575141094eb8b4db8ef9cd556de286d1137767c68836e740

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/supersized.shutter.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

oohlalove.com.tw/js/CSSPlugin.min.js

103.17.8.51

200 OK

13478

URL HTTP/1.1

oohlalove.com.tw/js/CSSPlugin.min.js
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

ASCII text, with very long lines (30727)

Size

13478
Hash

26edccdbca6aa1c1994ff015c73ab515

98501753c87ca6f83a7827b0588d23960087018c

2a87a143d36435a2792202c30c1fdc45b4f19b7b454bf260f8d86eea9ba5219e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/CSSPlugin.min.js HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Fri, 15 Apr 2022 11:30:58 GMT
Content-Encoding: gzip

www.googletagmanager.com/gtm.js?id=GTM-PLD7WQ

142.250.74.168

302 Found

250

URL HTTP/1.1

www.googletagmanager.com/gtm.js?id=GTM-PLD7WQ
IP

142.250.74.168:0
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators

Size

250
Hash

37f2c3c9ed98bde1edfc42b00508cb7f

e759ac6e1f3444311edf59fe6e6c491027437f14

59ed62623c5647ba673264946dc6de4e047c2c20ac72ad34d5881c4e679d6b15

HTTP Headers

                                        GET /gtm.js?id=GTM-PLD7WQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/

                                        HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtm.js?id=GTM-PLD7WQ
Cross-Origin-Resource-Policy: cross-origin
Date: Mon, 24 Oct 2022 22:50:23 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 250
X-XSS-Protection: 0

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.35:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

1ea30e37b7f86b7d0a7cb7341087fdc1

2e88a09e17356724c7e0f488d70be82ebc64f55c

bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 22:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.35:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

f1ae675435a8f16bc0b04ec012c41979

182f87a81464c80b0b25fb524c59592cd40b0ef4

9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 22:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtm.js?id=GTM-K8BNHV7

142.250.74.168

200 OK

50150

URL HTTP/2

www.googletagmanager.com/gtm.js?id=GTM-K8BNHV7
IP

142.250.74.168:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (4117)

Size

50150
Hash

d7402c8211180b6923444cd56192d1b9

38083189e35bf79e5f9a957094bf339721715db4

fab37b9e1edd068e606f4097227331d0fb4fc3c57ee05d63ab83d4ce6ce19f9a

HTTP Headers

                                        GET /gtm.js?id=GTM-K8BNHV7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://oohlalove.com.tw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 22:50:23 GMT
expires: Mon, 24 Oct 2022 22:50:23 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 50150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-PLD7WQ

142.250.74.168

200 OK

51499

URL HTTP/2

www.googletagmanager.com/gtm.js?id=GTM-PLD7WQ
IP

142.250.74.168:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1588)

Size

51499
Hash

f1cc29ea2fe60d70a0263ad14cdfe4c9

30eda81bec7d55e294d09e7dd391d49aecb6ad1c

b2f0e56ab86620e45e8d33f019e01e4153f1c2b697deeb22b82f8380c5ead720

HTTP Headers

                                        GET /gtm.js?id=GTM-PLD7WQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://oohlalove.com.tw/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 22:50:23 GMT
expires: Mon, 24 Oct 2022 22:50:23 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51499
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.35:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

1ea30e37b7f86b7d0a7cb7341087fdc1

2e88a09e17356724c7e0f488d70be82ebc64f55c

bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 22:50:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

oohlalove.com.tw/img/logo-ooh.png

103.17.8.51

200 OK

6959

URL HTTP/1.1

oohlalove.com.tw/img/logo-ooh.png
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

PNG image data, 160 x 182, 8-bit/color RGBA, interlaced\012- data

Size

6959
Hash

944b335e77f158bfe68100a784d7e663

b17148a79cbc551dbaf1abba1ac0bafc06055165

6a2ca869c2ece4ee792f9eb32eed7e8f6bd96ad3306a48539797279e1e6d6877

HTTP Headers

                                        GET /img/logo-ooh.png HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/style_goods.css?0.2

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/png
Content-Length: 6959
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:48 GMT
Accept-Ranges: bytes

oohlalove.com.tw/img/logo-light.png

103.17.8.51

200 OK

11036

URL HTTP/1.1

oohlalove.com.tw/img/logo-light.png
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

PNG image data, 160 x 182, 8-bit/color RGBA, non-interlaced\012- data

Size

11036
Hash

8cd37ab887ea4f5648e452d4993d450d

5c8d36bbbaea19bb1f5c39e40b41b0e5bb81f08a

2845b3fb3d4a2fc549f2b0a7d8d92b524e3062ec45f2d580676ebcd1e4dc5ac2

HTTP Headers

                                        GET /img/logo-light.png HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/style_goods.css?0.2

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/png
Content-Length: 11036
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:48 GMT
Accept-Ranges: bytes

oohlalove.com.tw/img/i1.svg

103.17.8.51

200 OK

322

URL HTTP/1.1

oohlalove.com.tw/img/i1.svg
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators

Size

322
Hash

e8ed162b30500ace8649569331ada085

0b46e69440eeba688d3ae6b2dcdd9646f11d2727

bf2c56f0790b3ac9e3ffb2f4df6312271602c429f6253896b9c1d10dfa198b25

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /img/i1.svg HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/style_goods.css?0.2

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/svg+xml
Content-Length: 322
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Thu, 18 Jun 2020 05:02:52 GMT
Accept-Ranges: bytes

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_165.png

103.17.8.51

200 OK

28259

URL HTTP/1.1

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_165.png
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced\012- data

Size

28259
Hash

e2897aa3d811c2f562766dc857c412c1

4dce39088c39ecff3e49a396f35525b5401090cd

06eedb86c02746a435df251dfe65faa87f590ae6f8ffb59eb6f40cdd9fd3e0e9

HTTP Headers

                                        GET /upload_image/dessertsIndex/dessertsIndex_165.png HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/png
Content-Length: 28259
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:42 GMT
Accept-Ranges: bytes

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_124.png

103.17.8.51

200 OK

22037

URL HTTP/1.1

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_124.png
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced\012- data

Size

22037
Hash

3897397fe0d8d7383b09d9348fb09855

1e777f79723e02528818af343aeaa2b56faa1c54

5d5b0b77b2a550491f09d7c4e77576ec49506b9cd99436f9338eff1f22b74e2f

HTTP Headers

                                        GET /upload_image/dessertsIndex/dessertsIndex_124.png HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/png
Content-Length: 22037
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Mon, 24 Aug 2020 03:59:40 GMT
Accept-Ranges: bytes

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_74.png

103.17.8.51

200 OK

23740

URL HTTP/1.1

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_74.png
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced\012- data

Size

23740
Hash

bb2fb823e8e17a6805b3db17bf932f78

7f7c40f5afeb2db68dd2e29b262c9db02f552780

d887fdba1caa93d205a24b0aeeaa4cc67e43b7bb602e43921d09f178135e6526

HTTP Headers

                                        GET /upload_image/dessertsIndex/dessertsIndex_74.png HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/png
Content-Length: 23740
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Fri, 05 Jun 2020 09:47:42 GMT
Accept-Ranges: bytes

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_187.png

103.17.8.51

200 OK

28942

URL HTTP/1.1

oohlalove.com.tw/upload_image/dessertsIndex/dessertsIndex_187.png
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced\012- data

Size

28942
Hash

a75e6b6e6da8721ed187065b81701d2b

25fbe5c69ac38e7d2a476ebdf44c14bb25acaa54

996eeadf74341bdefec20611340b38425561cdefefa4dab955975b379979b1bd

HTTP Headers

                                        GET /upload_image/dessertsIndex/dessertsIndex_187.png HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/step1.php

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/png
Content-Length: 28942
Connection: keep-alive
Upgrade: h2,h2c
Last-Modified: Mon, 24 Aug 2020 03:54:27 GMT
Accept-Ranges: bytes

oohlalove.com.tw/img/i2.svg

103.17.8.51

200 OK

327

URL HTTP/1.1

oohlalove.com.tw/img/i2.svg
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators

Size

327
Hash

e0abadc974dbe7d9aa48d043d017a105

0e6ba9cf53bf61995ae99f33b9465199a67b2fa6

1bf40ba964b71c110483ed47c65de97bac030cbb7e588080331b64efca59ee89

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /img/i2.svg HTTP/1.1
Host: oohlalove.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oohlalove.com.tw/style_goods.css?0.2

                                        HTTP/1.1 200 OK
Server: openresty
Date: Mon, 24 Oct 2022 22:50:24 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Thu, 18 Jun 2020 05:02:52 GMT
Content-Encoding: gzip

oohlalove.com.tw/img/i3.svg

103.17.8.51

200 OK

235

URL HTTP/1.1

oohlalove.com.tw/img/i3.svg
IP

103.17.8.51:0
ASN

#131149 Yuan-Jhen Info., Co., Ltd

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators

Size

235
Hash

2e35e55ab7037ab4dd28e5f5f000246d

4f09a2d

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (39)

#1 JS:Script (size: 423)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#2 JS:Script (size: 5305)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#3 JS:Script (size: 8044)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#4 JS:Script (size: 2440)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#5 JS:Script (size: 3836)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#6 JS:Script (size: 479)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#7 JS:Script (size: 475)

URL

IP

ASN

Introduced by

Inline HTML

Observations