Report - fren-sha.web.app/?x1=bryan.jen@fametech.com.tw

Report Overview

Visited public
2023-09-27 01:23:29
Tags
URL
fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Finishing URL
fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
IP / ASN
199.36.158.100
#54113 FASTLY
Title
Files

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-09-26 18:12:17	485 B	24 kB	151.101.129.229
fren-sha.web.app	unknown	2019-01-08	2023-09-06 11:08:22	2023-09-27 03:22:08	2.9 kB	246 kB	199.36.158.100
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-09-26 18:12:02	350 B	711 B	142.250.74.131
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-09-26 18:52:10	465 B	6.6 kB	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-09-07	medium	fren-sha.web.app/	Office365
2023-09-07	medium	fren-sha.web.app/	Office365
2023-09-07	medium	fren-sha.web.app/	Office365
2023-09-07	medium	fren-sha.web.app/	Office365
2023-09-07	medium	fren-sha.web.app/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-09-07	medium	fren-sha.web.app/static/css/main.5ca322ba.css	Other
2023-09-07	medium	fren-sha.web.app/static/js/main.551cf832.js	Other
2023-09-07	medium	fren-sha.web.app/static/media/bg-main.ccb62815c73028fbf8c6.png	Other
2023-09-07	medium	fren-sha.web.app/static/media/modal-head.51a3c627b97328e4df1e.png	Other
2023-09-07	medium	fren-sha.web.app/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-09-27	medium	fren-sha.web.app	Sinkholed
2023-09-27	medium	fren-sha.web.app	Sinkholed
2023-09-27	medium	fren-sha.web.app	Sinkholed
2023-09-27	medium	fren-sha.web.app	Sinkholed
2023-09-27	medium	fren-sha.web.app	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	fren-sha.web.app/static/js/main.551cf832.js	ScriptElement	190 kB	2023-09-22	2023-09-27
Pretty URL fren-sha.web.app/static/js/main.551cf832.js IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-22 01:36 Last Seen2023-09-27 03:23 Times Seen2 Hash e19964cb146783d60cc8beb0f7287dce a30526c5a8d622d76bb8ebd9a63a324be8701b01 3620ad515175587c394bd0878c2e1b8f7d3f1069521bef9b56d46a3b28216f08 Loading...

HTTP Transactions (9)

URL IP Response Size

fren-sha.web.app/?x1=bryan.jen@fametech.com.tw

199.36.158.100

200 OK

344 B

URL User Request GET HTTP/2
fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint10:A7:AE:98:C9:44:F3:06:82:AB:75:C5:C5:A6:80:ED:65:ED:60:A8
ValidityMon, 11 Sep 2023 19:25:25 GMT - Sun, 10 Dec 2023 19:25:24 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (790), with no line terminators
Size
344 B (344 bytes)
Hash
77c29d7c236d66ce29c6095e3b973c4a
a0dbb173adfef760aebc8a19ab7ea1d888127af0
6152534c9d97ef4c778be282022d323193e80532a1a0b9d83f8f8fe5b5f89c5c

HTTP Headers

GET /?x1=bryan.jen@fametech.com.tw HTTP/1.1
Host: fren-sha.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "37646223f628874cef70771830a9fa0503f7a966a6cf09221c76d912de857c9d-br"
last-modified: Mon, 04 Sep 2023 14:56:53 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:12 GMT
x-served-by: cache-bma1643-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695777792.252720,VS0,VE56
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 344
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1d4int/jQWwUygpljQ

142.250.74.131

471 B

URL
ocsp.pki.goog/s/gts1d4int/jQWwUygpljQ
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6fc94282da2eff089d6bd2efeea7ad93
9a3a190fb7bfac3e60dc2a2a6ec02e5caaadcdfc
513c9cc589d86c1abbc52575cb778d3917b78bb1b46b312f55bf24c7d0b12888

HTTP Headers

POST /s/gts1d4int/jQWwUygpljQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 01:23:12 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fren-sha.web.app/static/css/main.5ca322ba.css

199.36.158.100

200 OK

673 B

URL GET HTTP/3
fren-sha.web.app/static/css/main.5ca322ba.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint10:A7:AE:98:C9:44:F3:06:82:AB:75:C5:C5:A6:80:ED:65:ED:60:A8
ValidityMon, 11 Sep 2023 19:25:25 GMT - Sun, 10 Dec 2023 19:25:24 GMT

File type
ASCII text, with very long lines (2722)
Size
673 B (673 bytes)
Hash
3fad00bf7162fa6ba02939791795d2bb
b88c1a16e5e33a21027277ccd8f628e52bc52b0d
8f11247b4fea092ba02b07cb61836c2f5c4ab2b4d21cbe6f3866b27d02935a84

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/main.5ca322ba.css HTTP/1.1
Host: fren-sha.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 673
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "158c98bcdc5057c095e22db08a1b9140fdf4e508044659427597ebba966c0eb8-br"
last-modified: Mon, 04 Sep 2023 14:56:53 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:12 GMT
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1695777793.875481,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fren-sha.web.app/static/js/main.551cf832.js

199.36.158.100

200 OK

54 kB

URL GET HTTP/3
fren-sha.web.app/static/js/main.551cf832.js
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint10:A7:AE:98:C9:44:F3:06:82:AB:75:C5:C5:A6:80:ED:65:ED:60:A8
ValidityMon, 11 Sep 2023 19:25:25 GMT - Sun, 10 Dec 2023 19:25:24 GMT

File type
ASCII text, with very long lines (65465)
Size
54 kB (54506 bytes)
Hash
e19964cb146783d60cc8beb0f7287dce
a30526c5a8d622d76bb8ebd9a63a324be8701b01
3620ad515175587c394bd0878c2e1b8f7d3f1069521bef9b56d46a3b28216f08

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/main.551cf832.js HTTP/1.1
Host: fren-sha.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 54506
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "0676f5683ae30076145dc3c60991e9467e1c79b0b8f00703c761bb46e234efa2-br"
last-modified: Mon, 04 Sep 2023 14:56:53 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:12 GMT
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1695777793.874375,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.25.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 27 Sep 2023 01:23:12 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1059805
expires: Mon, 16 Sep 2024 01:23:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OffEIIznWcyAi5wkrNuadeSYSND0TVPT5oRwENOd1dsCoYYAxPT1LoxObYeyYSWAUbeK5IHy1gEFzTuaqSM846dGECpBGzTdx6VsKWTWytrT3qAwXnfWiQgXjo14CgXvgE9OHiBQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80cff0a5eb4756bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css

151.101.129.229

200 OK

23 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

File type
ASCII text, with very long lines (65324)
Size
23 kB (23347 bytes)
Hash
04aca1f4cd3ec3c05a75a879f3be75a3
675fcf28f9fbf37139d3b2c0b676f96f601a4203
7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11

HTTP Headers

GET /npm/bootstrap@4.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fren-sha.web.app
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.3
x-jsd-version-type: version
etag: W/"22688-Z1/PKPn783E507LAtnb5b2AaQgM"
content-encoding: br
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:12 GMT
age: 3632812
x-served-by: cache-fra-eddf8230071-FRA, cache-bma1657-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23347
X-Firefox-Spdy: h2

fren-sha.web.app/static/media/bg-main.ccb62815c73028fbf8c6.png

199.36.158.100

200 OK

150 kB

URL GET HTTP/3
fren-sha.web.app/static/media/bg-main.ccb62815c73028fbf8c6.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint10:A7:AE:98:C9:44:F3:06:82:AB:75:C5:C5:A6:80:ED:65:ED:60:A8
ValidityMon, 11 Sep 2023 19:25:25 GMT - Sun, 10 Dec 2023 19:25:24 GMT

File type
PNG image data, 2049 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size
150 kB (149591 bytes)
Hash
f1cbd93421a272323d777abe1591e3ff
d6f1a3e649dd9e49c87df269de9885f1b53f4d60
a254e26da44c2e96c7507c6921b5f3e3a473507a0431f87183c42ea257093fd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/media/bg-main.ccb62815c73028fbf8c6.png HTTP/1.1
Host: fren-sha.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/static/css/main.5ca322ba.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 149591
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "5dc4e3870814e95086d83c296b3f1b189467ad9679e1351254fd8ae09b515b1e-br"
last-modified: Mon, 04 Sep 2023 14:56:53 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:13 GMT
x-served-by: cache-bma1675-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695777793.213157,VS0,VE142
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fren-sha.web.app/static/media/modal-head.51a3c627b97328e4df1e.png

199.36.158.100

200 OK

36 kB

URL GET HTTP/3
fren-sha.web.app/static/media/modal-head.51a3c627b97328e4df1e.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint10:A7:AE:98:C9:44:F3:06:82:AB:75:C5:C5:A6:80:ED:65:ED:60:A8
ValidityMon, 11 Sep 2023 19:25:25 GMT - Sun, 10 Dec 2023 19:25:24 GMT

File type
PNG image data, 363 x 111, 8-bit/color RGBA, non-interlaced\012- data
Size
36 kB (35544 bytes)
Hash
7b92c4367dccc207947b1d7634a831b9
17d2b7847795e2a16d98e37e9f13443d22a33e02
b14b9d44fefc148919ad878a273e3f8a65a020cd333ee93e90db2db435aca304

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/media/modal-head.51a3c627b97328e4df1e.png HTTP/1.1
Host: fren-sha.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 35544
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0a48244fd1d0fad9cd9e848084424f49ce5e5da20e8a235e5b2f8f4330fea0b5-br"
last-modified: Mon, 04 Sep 2023 14:56:53 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:13 GMT
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1695777794.595149,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fren-sha.web.app/favicon.ico

199.36.158.100

200 OK

1.4 kB

URL GET HTTP/3
fren-sha.web.app/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint10:A7:AE:98:C9:44:F3:06:82:AB:75:C5:C5:A6:80:ED:65:ED:60:A8
ValidityMon, 11 Sep 2023 19:25:25 GMT - Sun, 10 Dec 2023 19:25:24 GMT

File type
MS Windows icon resource - 1 icon, 32x31, 32 bits/pixel\012- data
Size
1.4 kB (1371 bytes)
Hash
02b036f8c7c4540436c8ed74e3db06f1
f970ff14ec432a13b1793450545cecd39e0e82e9
acee39be3b422a91952a9e65abd8d6d987808da581519d63d0ee13b6cb41abfc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fren-sha.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fren-sha.web.app/?x1=bryan.jen@fametech.com.tw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1371
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "64a7d3a4d4b13f4d7a35fe8d6f5da2bb9732c26bce33152e3b7a309a5a67734e-br"
last-modified: Mon, 04 Sep 2023 14:56:53 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 27 Sep 2023 01:23:13 GMT
x-served-by: cache-bma1675-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1695777794.860137,VS0,VE66
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type