| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/styles.572738d2b631b3d66c72.css | 46.202.170.37 | 200 OK | 18 kB |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/styles.572738d2b631b3d66c72.css IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeUnicode text, UTF-8 text, with very long lines (11857), with CRLF line terminators Hashba72fefb956b594655b15214b6c1f197 9f00c489c1b44f94d6bc3241633e05b15ba9d538 42e1510268ebbdf3825ed1cbcef4cd91e7e7f5078bbccfa3ce51b62fd068a082
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/styles.572738d2b631b3d66c72.css HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: text/css
last-modified: Mon, 14 Apr 2025 02:39:10 GMT
vary: Accept-Encoding
etag: W/"67fc754e-44e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET code.jquery.com/jquery-3.6.3.min.js | 151.101.130.137 | 200 OK | 90 kB |
URL GET code.jquery.com/jquery-3.6.3.min.js IP 151.101.130.137:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hashcf2fbbf84281d9ecbffb4993203d543b 832a6a4e86daf38b1975d705c5de5d9e5f5844bc a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575
GET /jquery-3.6.3.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srv791374.hstgr.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15f5b"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 14 Apr 2025 20:42:12 GMT
age: 4452629
x-served-by: cache-lga13623-LGA, cache-hel1410023-HEL
x-cache: HIT, HIT
x-cache-hits: 41, 68427
x-timer: S1744663333.688628,VS0,VE0
vary: Accept-Encoding
content-length: 31046
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/polyfills-es2017.533ebfade82697eddcf6.js | 46.202.170.37 | 200 OK | 122 kB |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/polyfills-es2017.533ebfade82697eddcf6.js IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size122 kB (122405 bytes) Hashb1df07cdfe016ca2fe31198eda64db3c 75cc9808081dac4009e2c04cab156494c1df82fa ad6ad13398a7ccb1ac657a7932716ae2089ed2d95d55cd97b50b630d31062a32
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/polyfills-es2017.533ebfade82697eddcf6.js HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: application/javascript
last-modified: Mon, 14 Apr 2025 02:39:10 GMT
vary: Accept-Encoding
etag: W/"67fc754e-1de25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/assets/fonts/open-sans/open-sans-regular.woff2 | 46.202.170.37 | 404 Not Found | 146 B |
URL GET srv791374.hstgr.cloud/35-E%20Calli/assets/fonts/open-sans/open-sans-regular.woff2 IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/assets/fonts/open-sans/open-sans-regular.woff2 HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: text/html
content-length: 146
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/banner.f9855031892baad8a497.svg | 46.202.170.37 | 404 Not Found | 146 B |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/banner.f9855031892baad8a497.svg IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/banner.f9855031892baad8a497.svg HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infos_files/styles.572738d2b631b3d66c72.css
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET www.amendes.gouv.fr/favicon.ico | 185.8.53.118 | 200 OK | 2.2 kB |
URL GET www.amendes.gouv.fr/favicon.ico IP 185.8.53.118:443
ASN#47957 Worldline IGSA SA
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerDHIMYOTIS Subjectwww.amendes.gouv.fr Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87 ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 8 bits/pixel Hash2f34a3977599611db24405c819cb116f 4568ce43171f2a05903b38462891cd064ecc32e2 dd57f113a2eaa7ba3e6b1c507d22910ecd42437f9fef9577cfb8f4719cde59aa
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /favicon.ico HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: image/x-icon
content-length: 2238
last-modified: Fri, 07 Mar 2025 18:06:08 GMT
etag: "67cb3590-8be"
expires: Mon, 14 Apr 2025 21:42:13 GMT
cache-control: max-age=3600
accept-ranges: bytes
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
|
|
| GET www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-regular.woff2 | 185.8.53.118 | 200 OK | 14 kB |
URL GET www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-regular.woff2 IP 185.8.53.118:443
ASN#47957 Worldline IGSA SA
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerDHIMYOTIS Subjectwww.amendes.gouv.fr Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87 ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14380, version 1.0 Hash33543c5cc5d88f5695dd08c87d280dfd 600db9374e47e4f73a59ccc0a99bcc42f4a3e02a 9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /assets/fonts/open-sans/open-sans-regular.woff2 HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srv791374.hstgr.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: font/woff2
last-modified: Fri, 07 Mar 2025 18:06:08 GMT
vary: Accept-Encoding
etag: W/"67cb3590-382c"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/logo-amendes-gouv.svg | 46.202.170.37 | 200 OK | 24 kB |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/logo-amendes-gouv.svg IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeSVG Scalable Vector Graphics image Hashe0e8bfea36c47ef31ec61169c8b0fb95 5f42e1a67ec658d358b289c42e39e86619cf798b 5932743bf769427d05289e72fb2bdb7cd1a5bc46f01248be159eb820fe27271d
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/logo-amendes-gouv.svg HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Apr 2025 02:39:10 GMT
vary: Accept-Encoding
etag: W/"67fc754e-5cbd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/libs.js | 46.202.170.37 | 200 OK | 369 kB |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/libs.js IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65434), with no line terminators Size369 kB (369005 bytes) Hash3191b77970058cdc48b0a4c2123394d1 4e87101a9738a7e5a349c47a966d89658207bc3d 15c179af6a66be10fa288925824cbf9fea1e277066233e55425c119dd01db43e
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/libs.js HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: application/javascript
last-modified: Mon, 14 Apr 2025 02:39:11 GMT
vary: Accept-Encoding
etag: W/"67fc754f-5a16d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET www.amendes.gouv.fr/bg-intro.9630b0c4c57c3d72d3ec.jpg | 185.8.53.118 | 404 Not Found | 0 B |
URL GET www.amendes.gouv.fr/bg-intro.9630b0c4c57c3d72d3ec.jpg IP 185.8.53.118:443
ASN#47957 Worldline IGSA SA
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerDHIMYOTIS Subjectwww.amendes.gouv.fr Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87 ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bg-intro.9630b0c4c57c3d72d3ec.jpg HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://srv791374.hstgr.cloud/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: text/html; charset=utf-8
content-length: 1416
etag: "67cb3590-588"
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infospage.php | 46.202.170.37 | 200 OK | 59 kB |
URL User Request GET srv791374.hstgr.cloud/35-E%20Calli/infospage.php IP 46.202.170.37:443
CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (46861) Hash4c3832704666293f39a55ab33417f812 52ef9fc4196a490c9c485f2aafe268e55fabf091 a9ed869eb2a42b6199fb239b5b1819b5ab947e145079020dbae224ba7ddbf6ae
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency | urlquery | suspicious | Suspicious - Suspicious Javascript code |
GET /35-E%20Calli/infospage.php HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:11 GMT
content-type: text/html; charset=UTF-8
content-length: 9551
vary: Accept-Encoding
set-cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk; path=/
referrer-policy: same-origin
alt-svc: h3=":443"; ma=86400
content-encoding: gzip
accept-ranges: bytes
x-cache-age: 0
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js | 104.17.24.14 | 200 OK | 5.8 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js IP 104.17.24.14:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (545) Hashf757a9aa0bddb4d33e32ba706b94790f dc5e6f6e29da89457e3b313003bfaf49c799b208 a17f2e9528214109ad7194958c1c3ba5367166dc7163f630d5c02c04a7623ef6
GET /ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srv791374.hstgr.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 2243
cf-ray: 93060744db5b568a-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-16bb"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 526322
expires: Sat, 04 Apr 2026 20:42:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQFqhMc7XpuHT%2F50VfAxL6UNwa2EYd%2BB7lkK%2FrPBWO62YwzbDDBDh%2BWgoeMtpiWuCW2wOvBObY6nPuU9ptlPmuYiv8RReCTbBiJ5R%2B66wXJg%2BhS9plxOq%2F1L519TJU3eKI8KLQU5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-bold.woff2 | 185.8.53.118 | 200 OK | 15 kB |
URL GET www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-bold.woff2 IP 185.8.53.118:443
ASN#47957 Worldline IGSA SA
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerDHIMYOTIS Subjectwww.amendes.gouv.fr Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87 ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14880, version 1.0 Hash819af3d3abdc9f135d49b80a91e2ff4c 0fd9f29faa386a9c8de328f799d2698948ed3d25 1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /assets/fonts/open-sans/open-sans-bold.woff2 HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://srv791374.hstgr.cloud
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: font/woff2
last-modified: Fri, 07 Mar 2025 18:06:08 GMT
vary: Accept-Encoding
etag: W/"67cb3590-3a20"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/main-es2017.8d2eb497bdf1e092bf40.js | 46.202.170.37 | 200 OK | 462 kB |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/main-es2017.8d2eb497bdf1e092bf40.js IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size462 kB (462201 bytes) Hash4fd77e81274256ec8e5f595bb302756b 50c411ab5069e71e5826815c3ebc1f6d6aead744 5ef1328dfdfd1a8fa20c79d713b123df215edb78539a734074da936947b89cf9
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/main-es2017.8d2eb497bdf1e092bf40.js HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: application/javascript
last-modified: Mon, 14 Apr 2025 02:39:10 GMT
vary: Accept-Encoding
etag: W/"67fc754e-70d79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/runtime-es2017.d8ae961f0555d440b720.js | 46.202.170.37 | 200 OK | 3.6 kB |
URL GET srv791374.hstgr.cloud/35-E%20Calli/infos_files/runtime-es2017.d8ae961f0555d440b720.js IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeJavaScript source, ASCII text, with very long lines (3563), with no line terminators Hash359f1c1919a337983e6e4e07620ab459 c6473e4162c594cdf836a180bf9a5fc183d8a9dc c6ae08b826ab67f0dc74c4a61f24c2b988f4c2c9d7dd85b6aa616cae373394e5
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/infos_files/runtime-es2017.d8ae961f0555d440b720.js HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 20:42:12 GMT
content-type: application/javascript
last-modified: Mon, 14 Apr 2025 02:39:10 GMT
vary: Accept-Encoding
etag: W/"67fc754e-deb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET srv791374.hstgr.cloud/35-E%20Calli/assets/fonts/open-sans/open-sans-bold.woff2 | 46.202.170.37 | 404 Not Found | 146 B |
URL GET srv791374.hstgr.cloud/35-E%20Calli/assets/fonts/open-sans/open-sans-bold.woff2 IP 46.202.170.37:443
Requested byhttps://srv791374.hstgr.cloud/35-E%20Calli/infospage.php CertificateIssuerLet's Encrypt Subjectsrv791374.hstgr.cloud Fingerprint14:20:3C:DC:97:CB:18:CA:42:FB:69:EC:E0:34:A5:67:00:C8:D7:C6 ValidityMon, 14 Apr 2025 01:27:26 GMT - Sun, 13 Jul 2025 01:27:25 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - French Tax Agency |
GET /35-E%20Calli/assets/fonts/open-sans/open-sans-bold.woff2 HTTP/1.1
Host: srv791374.hstgr.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://srv791374.hstgr.cloud/35-E%20Calli/infospage.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ep5j4549tb1um55cpqj0jhh3nk
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Mon, 14 Apr 2025 20:42:13 GMT
content-type: text/html
content-length: 146
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|