Report - detaianta.jdevcloud.com/2025/infospage.php

Report Overview

Visited public
2025-07-05 08:59:59
Tags
government tax france phishing suspicious
Submit Tags
openphish
URL
detaianta.jdevcloud.com/2025/infospage.php
Finishing URL
detaianta.jdevcloud.com/2025/infospage.php
IP / ASN
104.37.84.50
#54456 CLOUDACCESS-NETWORK
Title
Site officiel unique de télépaiement | Amendes.gouv.fr
Phishing - French Tax Agency
Suspicious - Suspicious Javascript code

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
detaianta.jdevcloud.com	unknown	2015-02-16	2025-07-04	2025-07-04	6.1 kB	1.1 MB	104.37.84.50
www.amendes.gouv.fr	unknown	2003-10-12	2012-07-25	2025-07-05	2.0 kB	33 kB	185.8.53.118
code.jquery.com	634	2005-12-10	2012-05-21	2025-07-02	469 B	90 kB	151.101.66.137
cdnjs.cloudflare.com	235	2009-02-17	2012-05-23	2025-07-02	459 B	6.8 kB	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-07-04	medium	detaianta.jdevcloud.com/2025/infospage.php	Government of France

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	detaianta.jdevcloud.com/2025/infospage.php	ScriptElement	59 B	2025-06-30	2025-07-11
Pretty URL detaianta.jdevcloud.com/2025/infospage.php IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-30 22:39 Last Seen2025-07-11 17:29 Times Seen23 Hash 8a9daf4e727c5926a1a0584a0ca82cf4 e0b2e0c1a70fbd09f9f62008d7490897590db103 b55b2eb4a8a2322494b0313b67e052ae4d3d3a22f8faa7b11c6d55c24fada828 Loading...

	code.jquery.com/jquery-3.6.3.min.js	ScriptElement	90 kB	2023-03-10	2025-07-16
Pretty URL code.jquery.com/jquery-3.6.3.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 04:24 Last Seen2025-07-16 23:37 Times Seen10600 Hash cf2fbbf84281d9ecbffb4993203d543b 832a6a4e86daf38b1975d705c5de5d9e5f5844bc a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575 Loading...

	detaianta.jdevcloud.com/2025/infospage.php	Function	916 B	2024-01-26	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infospage.php IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by Function Embedded in HTML false Observations First Seen2024-01-26 23:55 Last Seen2025-07-16 01:48 Times Seen782 Hash 68c581ccb00d585fdb0af2e0bc5799be c6bfdf994f3c16e7527c726bc372a04bc3872bdd d2ccf7e379a3f9d443c40e21beb1ee503f57ac7633d2efbfd3f1577cdb752de9 Loading...

	detaianta.jdevcloud.com/2025/infospage.php	Function	1.7 kB	2024-01-26	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infospage.php IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by Function Embedded in HTML false Observations First Seen2024-01-26 23:55 Last Seen2025-07-16 01:48 Times Seen782 Hash b852c4eaaca1894d1c9149741b28e09a ab035051433149743af3db977f22b69f5e7ae2a4 5e2bb9f4cf78ed3015b9859759d0afc9e74afd58a2a103513808f42a76852f72 Loading...

	detaianta.jdevcloud.com/2025/infos_files/main-es2017.8d2eb497bdf1e092bf40.js	ScriptElement	462 kB	2023-03-14	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infos_files/main-es2017.8d2eb497bdf1e092bf40.js IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 03:47 Last Seen2025-07-16 01:48 Times Seen369 Hash 4fd77e81274256ec8e5f595bb302756b 50c411ab5069e71e5826815c3ebc1f6d6aead744 5ef1328dfdfd1a8fa20c79d713b123df215edb78539a734074da936947b89cf9 Loading...

	detaianta.jdevcloud.com/2025/infospage.php	EventHandler	16 B	2023-04-10	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infospage.php IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:57 Last Seen2025-07-16 23:49 Times Seen74284 Hash 7c3c3ddeb80438dcbb3d081d2d00e152 5a4016732ee72ec77b4f6ab17047bcea6d2ea34d 321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187 Loading...

	detaianta.jdevcloud.com/2025/infospage.php	ScriptElement	94 B	2023-03-14	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infospage.php IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 03:47 Last Seen2025-07-16 01:48 Times Seen345 Hash 4bdb363c83b9a3aedce67c75fa543087 6ea3c1658bf5dad03f0cdf2f0719199682d934a2 e027cfe2ad260a5a4de9ad3a60ae08a3ed629b91baaea379ed4597cf7c95e428 Loading...

	detaianta.jdevcloud.com/2025/infos_files/runtime-es2017.d8ae961f0555d440b720.js	ScriptElement	3.6 kB	2023-03-14	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infos_files/runtime-es2017.d8ae961f0555d440b720.js IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 03:47 Last Seen2025-07-16 01:48 Times Seen378 Hash 359f1c1919a337983e6e4e07620ab459 c6473e4162c594cdf836a180bf9a5fc183d8a9dc c6ae08b826ab67f0dc74c4a61f24c2b988f4c2c9d7dd85b6aa616cae373394e5 Loading...

	detaianta.jdevcloud.com/2025/infos_files/libs.js	ScriptElement	369 kB	2024-01-26	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infos_files/libs.js IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-26 23:55 Last Seen2025-07-16 01:48 Times Seen771 Hash 3191b77970058cdc48b0a4c2123394d1 4e87101a9738a7e5a349c47a966d89658207bc3d 15c179af6a66be10fa288925824cbf9fea1e277066233e55425c119dd01db43e Loading...

	detaianta.jdevcloud.com/2025/infos_files/polyfills-es2017.533ebfade82697eddcf6.js	ScriptElement	122 kB	2023-03-14	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infos_files/polyfills-es2017.533ebfade82697eddcf6.js IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 03:47 Last Seen2025-07-16 01:48 Times Seen377 Hash b1df07cdfe016ca2fe31198eda64db3c 75cc9808081dac4009e2c04cab156494c1df82fa ad6ad13398a7ccb1ac657a7932716ae2089ed2d95d55cd97b50b630d31062a32 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js	ScriptElement	5.8 kB	2023-03-07	2025-07-16
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03 Last Seen2025-07-16 01:48 Times Seen478 Hash f757a9aa0bddb4d33e32ba706b94790f dc5e6f6e29da89457e3b313003bfaf49c799b208 a17f2e9528214109ad7194958c1c3ba5367166dc7163f630d5c02c04a7623ef6 Loading...

	detaianta.jdevcloud.com/2025/infospage.php	ScriptElement	64 B	2023-03-14	2025-07-16
Pretty URL detaianta.jdevcloud.com/2025/infospage.php IP 104.37.84.50 ASN #54456 CLOUDACCESS-NETWORK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 03:47 Last Seen2025-07-16 01:48 Times Seen501 Hash d245a4c7f9b1676e8bf7a084577cb175 96b1e6c649c4a614baf7b2b93877bd091f3d1413 bc4de9ff8d3defae9652ed9d9b0055c42d25b141546a6a6b6b3d07c24f43db60 Loading...

HTTP Transactions (17)

URL IP Response Size

GET detaianta.jdevcloud.com/2025/infos_files/runtime-es2017.d8ae961f0555d440b720.js

104.37.84.50

200 OK

3.6 kB

URL GET
detaianta.jdevcloud.com/2025/infos_files/runtime-es2017.d8ae961f0555d440b720.js
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (3563), with no line terminators
Size
3.6 kB (3563 bytes)
Hash
359f1c1919a337983e6e4e07620ab459
c6473e4162c594cdf836a180bf9a5fc183d8a9dc
c6ae08b826ab67f0dc74c4a61f24c2b988f4c2c9d7dd85b6aa616cae373394e5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/runtime-es2017.d8ae961f0555d440b720.js HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Last-Modified: Fri, 04 Jul 2025 16:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1853
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/javascript

GET detaianta.jdevcloud.com/2025/assets/fonts/open-sans/open-sans-regular.woff2

104.37.84.50

404 Not Found

323 B

URL GET
detaianta.jdevcloud.com/2025/assets/fonts/open-sans/open-sans-regular.woff2
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
323 B (323 bytes)
Hash
279eaafe24d471c58108bb935a01e340
d1189f3cfa6bc20faab0773cb7650148d9df70c3
e434d2a838a00d7dab6229c3376a5e131bf840ce0befe8b30679215b821048f7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/assets/fonts/open-sans/open-sans-regular.woff2 HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Vary: Accept-Encoding
Content-Length: 323
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

GET detaianta.jdevcloud.com/2025/assets/fonts/open-sans/open-sans-bold.woff2

104.37.84.50

404 Not Found

320 B

URL GET
detaianta.jdevcloud.com/2025/assets/fonts/open-sans/open-sans-bold.woff2
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
320 B (320 bytes)
Hash
92e9627f48d0227443ae131e3c413be6
bc1ad74551e89c7dcf231d7437a4282f27b7ca4a
5f5860603794a0fd3d90a8e91e8735828de64a92543ff6861b3994b485d9a1ca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/assets/fonts/open-sans/open-sans-bold.woff2 HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Vary: Accept-Encoding
Content-Length: 320
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

GET www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-regular.woff2

185.8.53.118

200 OK

14 kB

URL GET
www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-regular.woff2
IP
185.8.53.118:443
ASN
#47957 Worldline IGSA SA

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDHIMYOTIS
Subjectwww.amendes.gouv.fr
Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87
ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
Size
14 kB (14380 bytes)
Hash
33543c5cc5d88f5695dd08c87d280dfd
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /assets/fonts/open-sans/open-sans-regular.woff2 HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://detaianta.jdevcloud.com/
Origin: https://detaianta.jdevcloud.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 08:59:24 GMT
content-type: font/woff2
last-modified: Fri, 07 Mar 2025 18:06:08 GMT
vary: Accept-Encoding
etag: W/"67cb3590-382c"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2

GET code.jquery.com/jquery-3.6.3.min.js

151.101.66.137

200 OK

90 kB

URL GET
code.jquery.com/jquery-3.6.3.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerSectigo Limited
Subject*.jquery.com
Fingerprint56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE
ValidityThu, 12 Jun 2025 00:00:00 GMT - Fri, 26 Jun 2026 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
90 kB (89947 bytes)
Hash
cf2fbbf84281d9ecbffb4993203d543b
832a6a4e86daf38b1975d705c5de5d9e5f5844bc
a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575

HTTP Headers

GET /jquery-3.6.3.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://detaianta.jdevcloud.com
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15f5b"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 05 Jul 2025 08:59:24 GMT
age: 2079042
x-served-by: cache-lga13623-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 41, 64083
x-timer: S1751705964.156430,VS0,VE0
vary: Accept-Encoding
content-length: 31046
X-Firefox-Spdy: h2

GET cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js

104.17.25.14

200 OK

5.8 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT

File type
JavaScript source, ASCII text, with very long lines (545)
Size
5.8 kB (5819 bytes)
Hash
f757a9aa0bddb4d33e32ba706b94790f
dc5e6f6e29da89457e3b313003bfaf49c799b208
a17f2e9528214109ad7194958c1c3ba5367166dc7163f630d5c02c04a7623ef6

HTTP Headers

GET /ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://detaianta.jdevcloud.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 08:59:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 2243
cf-ray: 95a5aa83b92e712a-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-16bb"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2877
expires: Thu, 25 Jun 2026 08:59:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wmd5ZyPWnKdlybI44A0ALqRDJjNBxYnUZFMvLFUtQCy0Bp%2Bcox3deLyv7MNYk4ADMlkvIB7nSi7QO%2BxSjSFmRiNVBbZA6L%2BQLdVXF7GP5hi9kxlsqWMe1e9XOOk696QIv%2FUfslZ%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET detaianta.jdevcloud.com/2025/infos_files/polyfills-es2017.533ebfade82697eddcf6.js

104.37.84.50

200 OK

122 kB

URL GET
detaianta.jdevcloud.com/2025/infos_files/polyfills-es2017.533ebfade82697eddcf6.js
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
122 kB (122405 bytes)
Hash
b1df07cdfe016ca2fe31198eda64db3c
75cc9808081dac4009e2c04cab156494c1df82fa
ad6ad13398a7ccb1ac657a7932716ae2089ed2d95d55cd97b50b630d31062a32

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/polyfills-es2017.533ebfade82697eddcf6.js HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Last-Modified: Fri, 04 Jul 2025 16:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 40236
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/javascript

GET detaianta.jdevcloud.com/2025/infos_files/main-es2017.8d2eb497bdf1e092bf40.js

104.37.84.50

200 OK

462 kB

URL GET
detaianta.jdevcloud.com/2025/infos_files/main-es2017.8d2eb497bdf1e092bf40.js
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
462 kB (462201 bytes)
Hash
4fd77e81274256ec8e5f595bb302756b
50c411ab5069e71e5826815c3ebc1f6d6aead744
5ef1328dfdfd1a8fa20c79d713b123df215edb78539a734074da936947b89cf9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/main-es2017.8d2eb497bdf1e092bf40.js HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Last-Modified: Fri, 04 Jul 2025 16:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=60
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/javascript

GET detaianta.jdevcloud.com/2025/infos_files/libs.js

104.37.84.50

200 OK

369 kB

URL GET
detaianta.jdevcloud.com/2025/infos_files/libs.js
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65434), with no line terminators
Size
369 kB (369005 bytes)
Hash
3191b77970058cdc48b0a4c2123394d1
4e87101a9738a7e5a349c47a966d89658207bc3d
15c179af6a66be10fa288925824cbf9fea1e277066233e55425c119dd01db43e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/libs.js HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Last-Modified: Fri, 04 Jul 2025 16:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=60
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/javascript

GET detaianta.jdevcloud.com/2025/infospage.php

104.37.84.50

200 OK

59 kB

URL User Request GET
detaianta.jdevcloud.com/2025/infospage.php
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (46861)
Size
59 kB (58587 bytes)
Hash
80116401fd9aeeb436378ed8c4666748
64806f9a96a89a751b0b008149aabe37ca1d7a9e
733ee3c2875f63c05f607c443444e197ebc61a1f9731a1cbf539cb9de7f9ed72

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency
urlquery	suspicious	Suspicious - Suspicious Javascript code
OpenPhish	phishing	Government of France

HTTP Headers

GET /2025/infospage.php HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:23 GMT
Server: Apache
X-Powered-By: PHP/8.1.32
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf; path=/; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=60
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

GET www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-bold.woff2

185.8.53.118

200 OK

15 kB

URL GET
www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-bold.woff2
IP
185.8.53.118:443
ASN
#47957 Worldline IGSA SA

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDHIMYOTIS
Subjectwww.amendes.gouv.fr
Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87
ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14880, version 1.0
Size
15 kB (14880 bytes)
Hash
819af3d3abdc9f135d49b80a91e2ff4c
0fd9f29faa386a9c8de328f799d2698948ed3d25
1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /assets/fonts/open-sans/open-sans-bold.woff2 HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://detaianta.jdevcloud.com/
Origin: https://detaianta.jdevcloud.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 08:59:24 GMT
content-type: font/woff2
last-modified: Fri, 07 Mar 2025 18:06:08 GMT
vary: Accept-Encoding
etag: W/"67cb3590-3a20"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2

GET detaianta.jdevcloud.com/2025/infos_files/styles.572738d2b631b3d66c72.css

104.37.84.50

200 OK

18 kB

URL GET
detaianta.jdevcloud.com/2025/infos_files/styles.572738d2b631b3d66c72.css
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (11857), with CRLF line terminators
Size
18 kB (17634 bytes)
Hash
ba72fefb956b594655b15214b6c1f197
9f00c489c1b44f94d6bc3241633e05b15ba9d538
42e1510268ebbdf3825ed1cbcef4cd91e7e7f5078bbccfa3ce51b62fd068a082

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/styles.572738d2b631b3d66c72.css HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Last-Modified: Fri, 04 Jul 2025 16:59:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5122
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/css

GET detaianta.jdevcloud.com/2025/infos_files/logo-amendes-gouv.svg

104.37.84.50

200 OK

24 kB

URL GET
detaianta.jdevcloud.com/2025/infos_files/logo-amendes-gouv.svg
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
24 kB (23741 bytes)
Hash
e0e8bfea36c47ef31ec61169c8b0fb95
5f42e1a67ec658d358b289c42e39e86619cf798b
5932743bf769427d05289e72fb2bdb7cd1a5bc46f01248be159eb820fe27271d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/logo-amendes-gouv.svg HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infospage.php
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Last-Modified: Fri, 04 Jul 2025 16:59:57 GMT
Accept-Ranges: bytes
Content-Length: 23741
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: image/svg+xml

GET www.amendes.gouv.fr/bg-intro.9630b0c4c57c3d72d3ec.jpg

185.8.53.118

404 Not Found

0 B

URL GET
www.amendes.gouv.fr/bg-intro.9630b0c4c57c3d72d3ec.jpg
IP
185.8.53.118:443
ASN
#47957 Worldline IGSA SA

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDHIMYOTIS
Subjectwww.amendes.gouv.fr
Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87
ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /bg-intro.9630b0c4c57c3d72d3ec.jpg HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Sat, 05 Jul 2025 08:59:24 GMT
content-type: text/html; charset=utf-8
content-length: 1416
etag: "67cb3590-588"
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2

GET detaianta.jdevcloud.com/2025/infos_files/banner.f9855031892baad8a497.svg

104.37.84.50

404 Not Found

320 B

URL GET
detaianta.jdevcloud.com/2025/infos_files/banner.f9855031892baad8a497.svg
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
320 B (320 bytes)
Hash
44b4794cb02d603d832d06c48894d85e
4ef87fc187fad12364a699974a1c935f2728365c
95bf34bfbc079c1976392b7dff01bb1a7bbacd5563efa87d55491b848e5e09e0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/banner.f9855031892baad8a497.svg HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infos_files/styles.572738d2b631b3d66c72.css
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 264
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

GET detaianta.jdevcloud.com/2025/infos_files/lock.d72c3b80536f448a52ed.svg

104.37.84.50

404 Not Found

318 B

URL GET
detaianta.jdevcloud.com/2025/infos_files/lock.d72c3b80536f448a52ed.svg
IP
104.37.84.50:443
ASN
#54456 CLOUDACCESS-NETWORK

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDigiCert Inc
Subject*.jdevcloud.com
Fingerprint04:6E:E6:00:5D:6D:56:4C:BF:3C:D6:62:C5:0C:FA:71:01:F8:53:15
ValiditySat, 26 Oct 2024 00:00:00 GMT - Wed, 26 Nov 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
318 B (318 bytes)
Hash
dc2db69d09f024d1e501412caa600118
7b4609b38ebf4d9badc0ae61607ced1b467f49f7
6e5e9d0fc1fa0a72ae2fb76b3bae55b68bcbf96f882cd672827fd98dbb84d098

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /2025/infos_files/lock.d72c3b80536f448a52ed.svg HTTP/1.1
Host: detaianta.jdevcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/2025/infos_files/styles.572738d2b631b3d66c72.css
Cookie: PHPSESSID=a56799b98739c29e0a2d82bb0f628ddf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 05 Jul 2025 08:59:24 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 262
Keep-Alive: timeout=60
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

GET www.amendes.gouv.fr/favicon.ico

185.8.53.118

200 OK

2.2 kB

URL GET
www.amendes.gouv.fr/favicon.ico
IP
185.8.53.118:443
ASN
#47957 Worldline IGSA SA

Requested by
https://detaianta.jdevcloud.com/2025/infospage.php
Certificate
IssuerDHIMYOTIS
Subjectwww.amendes.gouv.fr
Fingerprint85:2D:87:9E:F7:F2:AB:68:36:CB:50:70:0D:95:21:F5:A0:C5:95:87
ValiditySun, 27 Oct 2024 23:00:00 GMT - Fri, 28 Nov 2025 22:59:59 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Size
2.2 kB (2238 bytes)
Hash
2f34a3977599611db24405c819cb116f
4568ce43171f2a05903b38462891cd064ecc32e2
dd57f113a2eaa7ba3e6b1c507d22910ecd42437f9fef9577cfb8f4719cde59aa

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - French Tax Agency

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detaianta.jdevcloud.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 05 Jul 2025 08:59:25 GMT
content-type: image/x-icon
content-length: 2238
last-modified: Fri, 07 Mar 2025 18:06:08 GMT
etag: "67cb3590-8be"
expires: Sat, 05 Jul 2025 09:59:25 GMT
cache-control: max-age=3600
accept-ranges: bytes
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML