| www.googletagmanager.com/gtm.js?id=GTM-MNRN7F7 |  142.250.74.72 | 200 OK | 68 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-MNRN7F7 IP142.250.74.72:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2202) Hashce3a2524c5973ae722d99793d8a9a000 7198c5f468e211b625c9acfea065136ee9909888 02b24a0f9e5d1c4ea99fbe583bcac0fe64e427ea11616f5cb423688653e0ec57
GET /gtm.js?id=GTM-MNRN7F7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 06:07:21 GMT
expires: Thu, 25 Apr 2024 06:07:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67541
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/main-e27d0bd580792084.js |  35.189.241.124 | 200 OK | 31 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/main-e27d0bd580792084.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typegzip compressed data, from Unix Hash77d058f11e524e8e65d2336e72754393 7fe1c0247f8f31cec60b7cf7853aa06bc8cdf0d0 852860c4a1034b1c7a8123664d091c6d76f6824c93fe50769947891e17360347
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/main-e27d0bd580792084.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:20 GMT
etag: W/"1a590-18e89c0d5a0"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/b9QCNilEB_700NrJ31k1b/_ssgManifest.js | 35.189.241.124 | 200 OK | 17 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/b9QCNilEB_700NrJ31k1b/_ssgManifest.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typegzip compressed data, from Unix Hash80020c7a00c81d4458d9f483f89811bb 9c09340fd87f274fb700f4658bb87e255c06c5e6 c7c58c433ba174f05ec4b803a2594825bae9dc7c105bd273d7c7cf147962f4e2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/b9QCNilEB_700NrJ31k1b/_ssgManifest.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 29 Mar 2024 10:28:20 GMT
etag: W/"4d-18e89c0d5a0"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/653-ff409ffa5f2730d5.js | 35.189.241.124 | 200 OK | 230 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/653-ff409ffa5f2730d5.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typegzip compressed data, from Unix Size230 kB (230243 bytes) Hasha2b19a53b9f63244b2e64c1e1802b696 12999b8a85c7636942aaed85b49eda3261b185c0 4e7e170bdb3100a66c2de130b0916cff7a22967f2b1fe5beab4c58b1a6e6eba0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/653-ff409ffa5f2730d5.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"ed39d-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/pages/index-d624ffc5a5b0f033.js | 35.189.241.124 | 200 OK | 34 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/pages/index-d624ffc5a5b0f033.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typegzip compressed data, from Unix Hashfae378e16245f2b8a6f11f941c8d9243 b68671bde91f2b18909b85d2bf6065e4f9e889ff 1379dcdc943ba5527accb750fcad7c081f09550505a6345bb4f143cbe332bbb5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/pages/index-d624ffc5a5b0f033.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"1d7-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew9.woff | 216.58.207.227 | 200 OK | 51 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew9.woff IP216.58.207.227:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format, TrueType, length 50580, version 1.1 Hash5744304c4d9ed77c69e5bcf70270da35 220ab199a4d2a0be7fe475bf50156db156f52b12 1d100bf19f941be999f4bf69ffe43f7ddfed2fe84322e7e4af45c29369df067f
GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew9.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 50580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:52:43 GMT
expires: Fri, 25 Apr 2025 02:52:43 GMT
cache-control: public, max-age=31536000
age: 11678
last-modified: Wed, 13 Sep 2023 22:53:27 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o913452.ingest.sentry.io/api/5851486/envelope/?sentry_key=f952818b3e364d1caaf13ec30edce0b5&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.20.1 | 34.120.195.249 | 200 OK | 2 B |
URL POST HTTP/2o913452.ingest.sentry.io/api/5851486/envelope/?sentry_key=f952818b3e364d1caaf13ec30edce0b5&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.20.1 IP34.120.195.249:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerDigiCert Inc Subjectingest.sentry.io Fingerprint60:82:0B:58:64:CD:37:FD:3F:C0:84:4F:0B:69:CF:58:05:15:97:9A ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5851486/envelope/?sentry_key=f952818b3e364d1caaf13ec30edce0b5&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.20.1 HTTP/1.1
Host: o913452.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mail-inserm.hubside.fr/
Content-Type: text/plain;charset=UTF-8
Content-Length: 411
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 06:07:22 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 IP216.58.207.227:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33148, version 1.0 Hashe88b1871ed8eef59b7df05a91a6f2157 feebf868e5bc28362677fd6e92ac3d41c5c9715e 34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 03:10:12 GMT
expires: Fri, 25 Apr 2025 03:10:12 GMT
cache-control: public, max-age=31536000
age: 10630
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 IP216.58.207.227:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33148, version 1.0 Hashe88b1871ed8eef59b7df05a91a6f2157 feebf868e5bc28362677fd6e92ac3d41c5c9715e 34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 03:10:12 GMT
expires: Fri, 25 Apr 2025 03:10:12 GMT
cache-control: public, max-age=31536000
age: 10630
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 IP216.58.207.227:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33148, version 1.0 Hashe88b1871ed8eef59b7df05a91a6f2157 feebf868e5bc28362677fd6e92ac3d41c5c9715e 34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 03:10:12 GMT
expires: Fri, 25 Apr 2025 03:10:12 GMT
cache-control: public, max-age=31536000
age: 10630
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/materialicons/v141/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2 | 216.58.207.227 | 200 OK | 129 kB |
URL GET HTTP/2fonts.gstatic.com/s/materialicons/v141/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2 IP216.58.207.227:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 128616, version 1.0 Size129 kB (128616 bytes) Hasha4160421d2605545f69a4cd6cd642902 aaae93b146d97737fabe87a6bc741113e6899ad3 4a4dbc62fa335e411b94a532be091c58c0c0c4fa731339f11722577d3cf6443b
GET /s/materialicons/v141/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128616
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 13:21:03 GMT
expires: Fri, 18 Apr 2025 13:21:03 GMT
cache-control: public, max-age=31536000
age: 578779
last-modified: Wed, 31 Jan 2024 23:13:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/static/plugins/images/default/favicon.png | 35.189.241.124 | 200 OK | 1.1 kB |
URL GET HTTP/2mail-inserm.hubside.fr/static/plugins/images/default/favicon.png IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash9dccb496facb44031c493b839c1373e4 bed1967aad175144bb8e274c3dd607c4a5cf80f8 3ff9138a8be9d3f1fad421ded3632d4b8e0ad70a350d85829772ff5e7b541270
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /static/plugins/images/default/favicon.png HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:22 GMT
content-type: image/png
content-length: 1116
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Fri, 29 Mar 2024 10:28:20 GMT
etag: W/"45c-18e89c0d5a0"
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| cdn.hubside.com/media-s/qd_NtAtFzUSnBF-zNzjwDwQQHO9o6OK7/0x0:428x118/0x0:0x0/filters:fill(transparent):orient(360)/fd4bb602-842e-405e-9faf-75988cbdf47e%2Fmedia%2Ff%2F8%2F1%2Ff813667f-f42a-4eb7-8fc6-42469ed505a3 |  104.18.29.32 | 200 OK | 4.3 kB |
URL GET HTTP/2cdn.hubside.com/media-s/qd_NtAtFzUSnBF-zNzjwDwQQHO9o6OK7/0x0:428x118/0x0:0x0/filters:fill(transparent):orient(360)/fd4bb602-842e-405e-9faf-75988cbdf47e%2Fmedia%2Ff%2F8%2F1%2Ff813667f-f42a-4eb7-8fc6-42469ed505a3 IP104.18.29.32:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subjecthubside.com Fingerprint91:21:AA:6A:9E:B5:99:3D:0A:F2:BD:1D:F7:A1:DD:97:24:B7:96:35 ValidityThu, 28 Mar 2024 23:19:18 GMT - Wed, 26 Jun 2024 23:19:17 GMT
File typeRIFF (little-endian) data, Web/P image Hash56adb81c224c6f7091cb51e75019657c 04d1067e7fd4917b23d6d5e645467411ff918bbe d9ba71a560a89b91526b14b259d2aec3c957e45f0d5c8452b72c72e76f6d4829
GET /media-s/qd_NtAtFzUSnBF-zNzjwDwQQHO9o6OK7/0x0:428x118/0x0:0x0/filters:fill(transparent):orient(360)/fd4bb602-842e-405e-9faf-75988cbdf47e%2Fmedia%2Ff%2F8%2F1%2Ff813667f-f42a-4eb7-8fc6-42469ed505a3 HTTP/1.1
Host: cdn.hubside.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:22 GMT
content-type: image/webp
content-length: 4262
cache-control: private, no-cache, no-store, must-revalidate
content-disposition: inline
expires: Thu, 25 Apr 2024 06:07:22 GMT
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c27078f0a56b5-OSL
X-Firefox-Spdy: h2
|
|
| | 35.189.241.124 | 200 OK | 373 kB |
URL User Request GET HTTP/2IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
Size373 kB (373225 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:20 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
etag: "5b1e9-MT7m1sB0DwrrfgFM4D+d3LL3h8I"
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/framework-94d76cce0af99ba2.js | 35.189.241.124 | 200 OK | 130 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/framework-94d76cce0af99ba2.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size130 kB (130056 bytes) Hashab9e3a00b5f450f9a7ac14cdd550d1da dd4388975e2532ac4557ea4504542ce62840e629 128fe80ae9e3021e37ca0ffda6da43baf8dc0b1a0deae5e59da4e177750181f6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/framework-94d76cce0af99ba2.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"1fc08-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/482-690a5b8a51683a12.js | 35.189.241.124 | 200 OK | 16 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/482-690a5b8a51683a12.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hasha9db9e981b458951734361c5b8456ccd 54ead6d41e9645756a40422d71d279c32f60ec29 8b28884c65b9133352454a2facc4ff334e37ec25efa37ce9ad992d363a6efb09
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/482-690a5b8a51683a12.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"3e11-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/css/96ac5433674958c0.css | 35.189.241.124 | 200 OK | 289 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/css/96ac5433674958c0.css IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeASCII text, with very long lines (57699) Size289 kB (288667 bytes) Hash898fe112e80418ed54a5d85e7dcad01d 4f217461bb1b99721bc8c99142758678745e6470 55b5c2ea1d824820f8889e7001f800ba4a2f3cbb4fa687599d5a83f027c0ab1c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/css/96ac5433674958c0.css HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:20 GMT
etag: W/"4679b-18e89c0d5a0"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/webpack-913ba525933d6e4f.js | 35.189.241.124 | 200 OK | 6.2 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/webpack-913ba525933d6e4f.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (6409), with no line terminators Hash8f11d96c757857dcff6210f9866a861b 316a4caadd9d576d1254cf20c2548831771abc32 93ea90b6cfedd61d3321b17847d074d1294c10ddcc661e4a60e5fddbaef00bf0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/webpack-913ba525933d6e4f.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"1850-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/864-3bdeba325a3f1ed4.js | 35.189.241.124 | 200 OK | 17 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/864-3bdeba325a3f1ed4.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (16955) Hasha1a22af9923feec5086fa50131b7c0ea aa317a561481e09fafcc92cffaf4a23e711c0cb1 167950ff72a0bb580b0a6a1a0179fbbfbbad56c2c852770fb236661275470cfe
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/864-3bdeba325a3f1ed4.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"426c-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQUwaEQbjA.woff | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQUwaEQbjA.woff IP216.58.207.227:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format, TrueType, length 17120, version 1.1 Hashde9feb9c5e9ec15262c2205b04f653ef 028480a7e90bce8f32349ccfdf4861df041a4d0e 00162e39fffebf54a6d551dce591aee5f09fa25dbd3545c18b23951fb2e3125a
GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQUwaEQbjA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail-inserm.hubside.fr
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 03:01:07 GMT
expires: Fri, 25 Apr 2025 03:01:07 GMT
cache-control: public, max-age=31536000
age: 11174
last-modified: Thu, 14 Dec 2023 01:59:39 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/pages/_app-c88eb41918b1858c.js | 35.189.241.124 | 200 OK | 5.5 MB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/pages/_app-c88eb41918b1858c.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
Size5.5 MB (5534808 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/pages/_app-c88eb41918b1858c.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"547458-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/82c1ac34-ec18fc853eb9ae03.js | 35.189.241.124 | 200 OK | 216 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/82c1ac34-ec18fc853eb9ae03.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size216 kB (215528 bytes) Hash14a07077698b70741b8358bdef534a99 446000485d06d8997faa93cd97e81c10cd833354 2f0ab2a8fb3c78da1ad0c429425f186a13858d51c24eec54ea4e15e7977b7435
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/82c1ac34-ec18fc853eb9ae03.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"349e8-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i|Montserrat:400,400i,700,700i | 142.250.74.170 | 200 OK | 29 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i|Montserrat:400,400i,700,700i IP142.250.74.170:443
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (1572) Hash3ce789a74b460a78030e3d2770d34664 790e154d5949791ff3da68425028e80ae4f12c7d 4c2a106599704994f62f17d5bc79eea0be00b77033fee45dfdf2b1913a0a92b6
GET /css?family=Open+Sans:400,400i,700,700i|Montserrat:400,400i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 06:07:21 GMT
date: Thu, 25 Apr 2024 06:07:21 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/chunks/642-dbfbb044662c9e10.js | 35.189.241.124 | 200 OK | 946 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/chunks/642-dbfbb044662c9e10.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size946 kB (946273 bytes) Hashfd974137e2f66828b631af1af5ca8249 cb16f4be72417930837876d7bb2094e770388c55 8a288b511b49974591b8de9c40091d48f8ea090bd285480f6768a264a94593f8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/chunks/642-dbfbb044662c9e10.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"e7061-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/css/65b3f5aceff66cc5.css | 35.189.241.124 | 200 OK | 682 kB |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/css/65b3f5aceff66cc5.css IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
Size682 kB (682439 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/css/65b3f5aceff66cc5.css HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Fri, 29 Mar 2024 10:28:21 GMT
etag: W/"a69c7-18e89c0d988"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mail-inserm.hubside.fr/_next/static/b9QCNilEB_700NrJ31k1b/_buildManifest.js | 35.189.241.124 | 200 OK | 995 B |
URL GET HTTP/2mail-inserm.hubside.fr/_next/static/b9QCNilEB_700NrJ31k1b/_buildManifest.js IP35.189.241.124:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://mail-inserm.hubside.fr/ CertificateIssuerLet's Encrypt Subjecthubside.fr Fingerprint5A:19:4E:AD:2C:56:C3:A7:03:28:02:CD:C2:7A:BC:77:9C:D0:37:9B ValiditySat, 16 Mar 2024 18:50:27 GMT - Fri, 14 Jun 2024 18:50:26 GMT
File typeASCII text, with very long lines (1051), with no line terminators Hash573968201d3ab2fe028a0d83e82f1a82 5f1dbf74c071825541c45b56fbe276f407b5e8f5 ba6efe4c9e1f7a4558a541a13455d2da80e7d8810429748c2e1fbcf6dab057c6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | OpenPhish | phishing | Outlook | | PhishTank | phishing | Other |
GET /_next/static/b9QCNilEB_700NrJ31k1b/_buildManifest.js HTTP/1.1
Host: mail-inserm.hubside.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail-inserm.hubside.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:07:21 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 29 Mar 2024 10:28:20 GMT
etag: W/"3e3-18e89c0d5a0"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|