Report - jingau.com.tw/it/webstaticmktg2014designfontPP/SansPayPalSansBig-Bold.woff/8c0e6f026baa54c89bd4430d38405195/index.htm

Report Overview

Submitted URL
jingau.com.tw/it/webstaticmktg2014designfontPP/SansPayPalSansBig-Bold.woff/8c0e6f026baa54c89bd4430d38405195/index.htm
IP
103.118.24.38
ASN
#131626 NSS INTL CO., LTD.
Submitted
2023-01-01 02:17:01
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	737 B	93.184.220.29
jingau.com.tw	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.6 kB	112 kB	103.118.24.38
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	62 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.161.148.163
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	303 B	1.1 kB	142.250.74.74
ajax.googleapis.com	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	615 B	87 kB	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-01	medium	jingau.com.tw/it/webstaticmktg2014designfontPP/SansPayPalSansBig-Bold.woff/8c0e6f026baa54c89bd4430d38405195/index.htm	Malware
2023-01-01	medium	jingau.com.tw/index.php/404	Malware
2023-01-01	medium	jingau.com.tw/media/system/js/core.js	Malware
2023-01-01	medium	jingau.com.tw/media/system/js/modal.js	Malware
2023-01-01	medium	jingau.com.tw/plugins/system/jqueryeasy/jquerynoconflict.js	Malware
2023-01-01	medium	jingau.com.tw/media/system/js/mootools-core.js	Malware
2023-01-01	medium	jingau.com.tw/media/system/js/mootools-more.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js	95 kB	2023-03-07	2024-04-16
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:23 Last Seen2024-04-16 07:03:38 Times Seen13658 Hash b8d64d0bc142b3f670cc0611b0aebcae abcd2ba13348f178b17141b445bc99f1917d47af 47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4 Loading...

	ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js	201 kB	2023-03-07	2024-03-02
Pretty URL ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:39:12 Last Seen2024-03-02 16:08:39 Times Seen361 Hash 72bfa9a0bc379239bfcd60adb8548867 0dc4d6250c64c1ab0bcbc115a1d15f8bb398f411 50ea31c0452a869e41485170ab3ca8d90a7824b99860f4c707c97ed728598a3f Loading...

	jingau.com.tw/media/system/js/modal.js	9.7 kB	2023-03-07	2024-01-25
Pretty URL jingau.com.tw/media/system/js/modal.js IP 103.118.24.38 ASN #131626 NSS INTL CO., LTD. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:35:58 Last Seen2024-01-25 18:42:43 Times Seen178 Hash 637c3dd497107b7460a1f5a9e616a01c bd7115c100422d2963f97a2b4c96a7fd3c1763b9 1d44d98509149be106f7f160e40e5049931817efa8a6aecec637ac3f6dcebdd0 Loading...

HTTP Transactions (36)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5c6a87f6d6b5c54dcb1b630ae6001c73
e0315c9936d6f2f58ff7d078e74a8ec7802265a8
d88ef07b9fcfb42d27a490cb57df4adaf3261efc7d0b38246db387da3ca32a8d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D88EF07B9FCFB42D27A490CB57DF4ADAF3261EFC7D0B38246DB387DA3CA32A8D"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7296
Expires: Sun, 01 Jan 2023 04:18:27 GMT
Date: Sun, 01 Jan 2023 02:16:51 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ab3625faa748b97df39d95f3265ccd14
3930df2e3cb45a1abe47de735002fba535de4f08
0b0a1eb64c4a23598884f08be0a9694c8fcaeffc4b0df790a678104f44fe1c14

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B0A1EB64C4A23598884F08BE0A9694C8FCAEFFC4B0DF790A678104F44FE1C14"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4322
Expires: Sun, 01 Jan 2023 03:28:53 GMT
Date: Sun, 01 Jan 2023 02:16:51 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 01 Jan 2023 01:47:15 GMT
content-type: application/json
age: 1776
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d6d99cd1201f65eeb7d437b62bad1f3
6d5e41d7a2786ccaad7c7276ecdd9411f8cbd6ba
db2b42007fc4ad126c8af8d7cce27af88947231d09ded56da33cfee3d2594e23

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB2B42007FC4AD126C8AF8D7CCE27AF88947231D09DED56DA33CFEE3D2594E23"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4857
Expires: Sun, 01 Jan 2023 03:37:48 GMT
Date: Sun, 01 Jan 2023 02:16:51 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: QASPXdAP2eCj3VlAhX9fvFxI7AO6bxHo12j182fPBnFqKL4fAmL5zfPxp00HG6cQFcOo9qKnJy8=
x-amz-request-id: MFMFGM4NSPTZYN1J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 01 Jan 2023 01:59:53 GMT
age: 1018
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 02:16:51 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 01 Jan 2023 01:33:31 GMT
age: 2600
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
afc798d7819a9c19437d20a92eb6f6ec
badde0ed90ac423d5796dc35808a3cd6cec09820
f101fbf84795c278d89aafdadf23cca6c5010b372a48d39a5354555bfb961e61

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4997
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 02:16:51 GMT
Last-Modified: Sun, 01 Jan 2023 00:53:34 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.161.148.163

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.148.163:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: E7OXecjzzRBpKJQdeL4Gew==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GNW3QFLmvDYfIwAWFjVboD0RF0k=

jingau.com.tw/it/webstaticmktg2014designfontPP/SansPayPalSansBig-Bold.woff/8c0e6f026baa54c89bd4430d38405195/index.htm

103.118.24.38

302 Moved Temporarily

0 B

URL HTTP/1.1
jingau.com.tw/it/webstaticmktg2014designfontPP/SansPayPalSansBig-Bold.woff/8c0e6f026baa54c89bd4430d38405195/index.htm
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /it/webstaticmktg2014designfontPP/SansPayPalSansBig-Bold.woff/8c0e6f026baa54c89bd4430d38405195/index.htm HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Moved Temporarily
Date: Sun, 01 Jan 2023 02:16:51 GMT
Server: Apache
Set-Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43; path=/
Location: http://jingau.com.tw/index.php/404
X-Powered-By: PleskLin
Content-Length: 0
Connection: close
Content-Type: text/html

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11113
Expires: Sun, 01 Jan 2023 05:22:06 GMT
Date: Sun, 01 Jan 2023 02:16:53 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11113
Expires: Sun, 01 Jan 2023 05:22:06 GMT
Date: Sun, 01 Jan 2023 02:16:53 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11113
Expires: Sun, 01 Jan 2023 05:22:06 GMT
Date: Sun, 01 Jan 2023 02:16:53 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11113
Expires: Sun, 01 Jan 2023 05:22:06 GMT
Date: Sun, 01 Jan 2023 02:16:53 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8561e732-44f3-4c66-8b48-832a439b9ac3.jpeg

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8561e732-44f3-4c66-8b48-832a439b9ac3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7791 bytes)
Hash
f2a2d6220c99ca386f0517d430a7a503
75172bf57617e9fd91296df9ef35f2da78b615a0
704c955a91c12506e2835aec357c6448c0bca103142dd0b44133dbbe59b7344a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8561e732-44f3-4c66-8b48-832a439b9ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7791
x-amzn-requestid: be887802-b5d5-49ad-a0e0-b78005a82e83
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dy0mgHFxIAMF_4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa9af6-53ee68c2626e0ec236df004b;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 07:12:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Gt5vG3db7vh_L07T6s-bey5SnBRU8Z1gVdI-YLMTtbwz1Bbn_S6sHA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 14:00:53 GMT
age: 44160
etag: "75172bf57617e9fd91296df9ef35f2da78b615a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6443a10-1e35-4576-9471-56fc40767f0c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13981 bytes)
Hash
23035a1b5389046dbc9821cd92244215
2deec757f1833f6ae0956a5e0876bc31029e8722
564db87897cfa6df3920203687b33c0315a58e804b22fed2e1dbaddb3c3832b4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6443a10-1e35-4576-9471-56fc40767f0c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13981
x-amzn-requestid: d73b4be8-3a1b-4ed8-9487-43d540ff93e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4u5fEhiIAMFkgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acf83c-38067c0820fd6f7e4771345b;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 02:15:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ie_MDBnENQW3b3yeuQbJc8MDqHt5mYLo2Hv_h4bAYtsrlQ1CJOBzAA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 18:28:11 GMT
age: 83677
etag: "2deec757f1833f6ae0956a5e0876bc31029e8722"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff91ff871-3f80-4a32-932c-b81a53066ccd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8884 bytes)
Hash
4367f9a4e85a0b03fc104148023c73e6
81b2d64110d0f5853a7190be93252dac4a428b7a
ec0b378ad8bea69e474ba2fd53321467a04143b39da7f438924b0a7604fa6751

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff91ff871-3f80-4a32-932c-b81a53066ccd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8884
x-amzn-requestid: d0b8e033-5a7a-4c2c-8cee-7cd14d205e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d-XYNFV6IAMFoog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63af3901-1f152c56526a8cfd6aab77d1;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 19:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: txfmFQ9TGInSTStDTIQSYeK7BpV7QoGGTsjkMyiiL1uz3wX54wzHEw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 03:14:01 GMT
age: 82972
etag: "81b2d64110d0f5853a7190be93252dac4a428b7a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57f8a525-23f7-4bb9-a254-5e123247f1cc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8343 bytes)
Hash
9d5c6e086c24a24d9ae8179b10d12be0
f7a1cd9d20352e369f02aa3e60e4dbc522b43058
7136c5734cc97eb90c37ef7b295809a3886cc06a0a9a9842d128922733437df2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57f8a525-23f7-4bb9-a254-5e123247f1cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8343
x-amzn-requestid: 29cf02cf-45c4-47ec-9ae4-50974ddec378
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d2GooHEyIAMFg4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63abeb03-126ff69b798dad2e229fed1c;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 07:06:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3v14x84wqsu13XqJXNuP-G1Ba7zpfVAxAXlAidONryM6H_M35GnR5w==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 12:43:39 GMT
age: 48794
etag: "f7a1cd9d20352e369f02aa3e60e4dbc522b43058"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F151a214a-7044-496c-9662-1b2876c624f1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.1 kB (6146 bytes)
Hash
af3364657e9f5fc73ad87a8bfbcc74a9
09275100c95963905ea2c6ad0cfe719d44e731ad
773ef6723580164ae4f978de9d5d806b4903c827f32f0cd76184ec59abf62772

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F151a214a-7044-496c-9662-1b2876c624f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6146
x-amzn-requestid: b428336f-ff33-4425-b753-bbabfcae4c52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dsOHKFN2oAMF7SA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7f6fa-5e9739cb09f539507cbf7f81;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 07:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9_j5M39bx6NOls-GtljmKs1CGzL1rR7SmHhQ7LPYkHeJ4L4TE34CRQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 16:10:51 GMT
age: 36362
etag: "09275100c95963905ea2c6ad0cfe719d44e731ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbff09b5-fd04-45ca-959e-83e4f40897df.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10696 bytes)
Hash
02a9375cec16bfe696766c8d373d9b54
2167c2f197dd44558ac2dea500d8b6b3cfa50e83
6f94fe0c817b031d913d53fee6b317148bdabea044102b8f0c9df8a3737d59f1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbff09b5-fd04-45ca-959e-83e4f40897df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10696
x-amzn-requestid: 2117681b-ee8b-4881-b860-087a8662a3c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7xM1FK7oAMFd4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae2f1e-5a3648ba2ac7ba01177f361d;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 00:21:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CpPZkZcwPWBN4qFQeb6hLMr-dP6SrlxludndGa7wsuCzNPKVgYkfLQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 07:51:53 GMT
age: 66300
etag: "2167c2f197dd44558ac2dea500d8b6b3cfa50e83"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Tinos

142.250.74.74

200 OK

542 B

URL HTTP/1.1
fonts.googleapis.com/css?family=Tinos
IP
142.250.74.74:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
542 B (542 bytes)
Hash
67c131eb25823bebecfd95ef344bed97
4b330b0ff8755da771033da1ee63d157cfee8cdd
e9d0092f3e2c15fdf8a4702168694bc38de2e5529a6b81e9470947db391472fb

HTTP Headers

GET /css?family=Tinos HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 01 Jan 2023 02:16:58 GMT
Date: Sun, 01 Jan 2023 02:16:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js

142.250.74.74

200 OK

34 kB

URL HTTP/1.1
ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js
IP
142.250.74.74:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Size
34 kB (33845 bytes)
Hash
d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716

HTTP Headers

GET /ajax/libs/jquery/1.7/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33845
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 31 Dec 2022 16:21:57 GMT
Expires: Sun, 31 Dec 2023 16:21:57 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 35701
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8

ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js

142.250.74.74

200 OK

52 kB

URL HTTP/1.1
ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js
IP
142.250.74.74:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (64651)
Size
52 kB (51653 bytes)
Hash
90a9d6025c5c6fb9d338400221db28c4
8db4fb29ad7009a26a3e9b60945de0dbcbc216dc
e02adbfb9cea8e180e266a1f23d446a4aa072f50d602d990880708d3b3185469

HTTP Headers

GET /ajax/libs/jqueryui/1.8/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 51653
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 27 Dec 2022 06:06:53 GMT
Expires: Wed, 27 Dec 2023 06:06:53 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 418205
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8

jingau.com.tw/index.php/404

103.118.24.38

200 OK

16 kB

URL HTTP/1.1
jingau.com.tw/index.php/404
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1432), with CR, LF line terminators
Size
16 kB (16138 bytes)
Hash
a67e50d62b9ef5800c1087eb825b69ee
c31c8d46642ce2ebdcd7a45729d49569649df583
5c2fa1a994c017f72ba3bbbc4c110598e82fd60151d1fe39a0eb5753f26246ec

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /index.php/404 HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:52 GMT
Server: Apache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Cache-Control: no-cache
Pragma: no-cache
X-Powered-By: PleskLin
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

jingau.com.tw/templates/theme1372/css/normalize.css

103.118.24.38

200 OK

9.0 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/normalize.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text
Size
9.0 kB (9028 bytes)
Hash
89cd078f1b1f9b0e0855d62f264a3842
2d9393ea0494c3ee20d697e0d3ce78640ea78f32
f76c7bed17a08a2487acdf82fb487b3b06f5002c825fbf9d7169de6c3344305f

HTTP Headers

GET /templates/theme1372/css/normalize.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:58 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "fc0943-2344-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 9028
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/templates/theme1372/css/isotope.css

103.118.24.38

200 OK

1.7 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/isotope.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text, with CRLF line terminators
Size
1.7 kB (1677 bytes)
Hash
e9f9fc63b8ea618a16c289e5ca72b5cd
aafa043eb3890fbd944a5db06d6e065c50d20444
cebd9df35604d5bb929571df35b9c3c573ea783459e1973f16f359474de0a49e

HTTP Headers

GET /templates/theme1372/css/isotope.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:58 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "fc0947-68d-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 1677
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/templates/theme1372/css/touch.gallery.css

103.118.24.38

200 OK

2.4 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/touch.gallery.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text
Size
2.4 kB (2371 bytes)
Hash
2f0a3953db30b4daf101c4e232538b26
d33b3c6f090ac1732e3af946a267f1b58e693763
bfb56ec5071f78c2b11aeda66ea708e80a80dd541ed53a7ca2655035138f80de

HTTP Headers

GET /templates/theme1372/css/touch.gallery.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:58 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "fc094c-943-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 2371
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/templates/theme1372/css/skeleton12.css

103.118.24.38

200 OK

12 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/skeleton12.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text, with CRLF line terminators
Size
12 kB (11789 bytes)
Hash
52d07fe2b1fdcdd07e841d92e8a3c663
2c8450bd5a7dc46ffce2ad348b5c32048582b18e
deb87c8c629437793c7e2ab04c1c04e4172ad810d219986889e7d22e9ef65274

HTTP Headers

GET /templates/theme1372/css/skeleton12.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Wed, 15 Feb 2017 06:53:16 GMT
ETag: "fc093f-2e0d-5488c228f6f00"
Accept-Ranges: bytes
Content-Length: 11789
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/templates/theme1372/css/responsive.css

103.118.24.38

200 OK

9.9 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/responsive.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text, with CRLF line terminators
Size
9.9 kB (9850 bytes)
Hash
743d43d3ddf98deef355dd90dd947bd7
e424afd16ac900d3d91b6eba5e5c8e361605c7eb
fe161923efb92e479e8aa80fded443e19e006f296d1fed278097940e354b8b47

HTTP Headers

GET /templates/theme1372/css/responsive.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "fc094a-267a-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 9850
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/templates/theme1372/css/template.css

103.118.24.38

200 OK

22 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/template.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
Unicode text, UTF-8 text, with very long lines (487), with CRLF line terminators
Size
22 kB (22256 bytes)
Hash
e64d6bd553eb7fc5e8a3c246f74f6fe9
702ee8d257e36e3eddb19ab9b861cb65e69aa7d3
e55df8aa63e3ba91d221b6b15133d6a3bc6354c81d0f839d02ae2674a40eac6e

HTTP Headers

GET /templates/theme1372/css/template.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:58 GMT
Server: Apache
Last-Modified: Fri, 17 Feb 2017 07:17:03 GMT
ETag: "fc094d-56f0-548b4b34c79c0"
Accept-Ranges: bytes
Content-Length: 22256
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/templates/theme1372/css/default.css

103.118.24.38

200 OK

21 kB

URL HTTP/1.1
jingau.com.tw/templates/theme1372/css/default.css
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
21 kB (21056 bytes)
Hash
eccedc57ae1de53228e85e240628c8b2
28389a405069ab73dc93b9430528e0cf0d50447e
7c5832ea6971022fbbbf31b799492bda24dae09d4a264cdcec38d76f14fb9efa

HTTP Headers

GET /templates/theme1372/css/default.css HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:58 GMT
Server: Apache
Last-Modified: Thu, 16 Feb 2017 11:57:17 GMT
ETag: "fc0945-5240-548a47fa66140"
Accept-Ranges: bytes
Content-Length: 21056
X-Powered-By: PleskLin
Connection: close
Content-Type: text/css

jingau.com.tw/media/system/js/core.js

103.118.24.38

200 OK

4.8 kB

URL HTTP/1.1
jingau.com.tw/media/system/js/core.js
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text, with very long lines (513)
Size
4.8 kB (4784 bytes)
Hash
4b59c964036a5a6ba36d4cfa34968c2a
a05177eb337fb8c96cef328d673644caae9a5dc6
ed8f120343683850762fc8fb5e8ee8dc3586a2ad7da5c12ca31ef125628cb15b

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /media/system/js/core.js HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "f60dd3-12b0-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 4784
X-Powered-By: PleskLin
Connection: close
Content-Type: text/javascript

jingau.com.tw/media/system/js/modal.js

103.118.24.38

200 OK

9.7 kB

URL HTTP/1.1
jingau.com.tw/media/system/js/modal.js
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
Unicode text, UTF-8 text, with very long lines (599)
Size
9.7 kB (9732 bytes)
Hash
637c3dd497107b7460a1f5a9e616a01c
bd7115c100422d2963f97a2b4c96a7fd3c1763b9
1d44d98509149be106f7f160e40e5049931817efa8a6aecec637ac3f6dcebdd0

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /media/system/js/modal.js HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "f60dcf-2604-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 9732
X-Powered-By: PleskLin
Connection: close
Content-Type: text/javascript

jingau.com.tw/plugins/system/jqueryeasy/jquerynoconflict.js

103.118.24.38

200 OK

20 B

URL HTTP/1.1
jingau.com.tw/plugins/system/jqueryeasy/jquerynoconflict.js
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type
ASCII text, with no line terminators
Size
20 B (20 bytes)
Hash
3179f2255b046d5f2e9a71e365287bef
462e90dd5487b4c692a7c609b7b78f1b93496343
844a36c2c43704c5ae846d0f52093463bc6e84d547d04528eefb6313129e570f

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /plugins/system/jqueryeasy/jquerynoconflict.js HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "f807c4-14-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 20
X-Powered-By: PleskLin
Connection: close
Content-Type: text/javascript

jingau.com.tw/media/system/js/mootools-core.js

103.118.24.38

200 OK

0 B

URL HTTP/1.1
jingau.com.tw/media/system/js/mootools-core.js
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /media/system/js/mootools-core.js HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "f60dd4-1786a-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 96362
X-Powered-By: PleskLin
Connection: close
Content-Type: text/javascript

jingau.com.tw/media/system/js/mootools-more.js

103.118.24.38

200 OK

0 B

URL HTTP/1.1
jingau.com.tw/media/system/js/mootools-more.js
IP
103.118.24.38:0
ASN
#131626 NSS INTL CO., LTD.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /media/system/js/mootools-more.js HTTP/1.1
Host: jingau.com.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jingau.com.tw/index.php/404
Cookie: 3de0b72427826700bcfd251220ca163d=6r6ut9u8d2ubul3tv3lpelfv43

HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 02:16:59 GMT
Server: Apache
Last-Modified: Tue, 07 May 2013 19:39:00 GMT
ETag: "f60de4-3a2fb-4dc25f807bd00"
Accept-Ranges: bytes
Content-Length: 238331
X-Powered-By: PleskLin
Connection: close
Content-Type: text/javascript

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (36)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size