| code.jquery.com/jquery-1.11.3.js |  151.101.2.137 | 200 OK | 84 kB |
URL GET HTTP/2code.jquery.com/jquery-1.11.3.js IP151.101.2.137:443
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash7f38dcbfb11aff050652ff3b754adb63 96c73f3774471cc8378c77a64ecf09b7f625d8b7 2065aecca0fb9b0567358d352ed5f1ab72fce139bf449b4d09805f5d9c3725ed
GET /jquery-1.11.3.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-456ea"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 23 Apr 2024 23:43:56 GMT
age: 19115161
x-served-by: cache-lga21938-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 37, 26452
x-timer: S1713915836.238955,VS0,VE0
vary: Accept-Encoding
content-length: 84538
X-Firefox-Spdy: h2
|
|
| comptes-support.v6.army/orange/fonts/HelvNeue55_W1G.woff2 |  46.175.150.95 | 404 Not Found | 808 B |
URL GET HTTP/2comptes-support.v6.army/orange/fonts/HelvNeue55_W1G.woff2 IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/fonts/HelvNeue55_W1G.woff2 HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/html
content-length: 808
last-modified: Sat, 13 Apr 2024 18:20:22 GMT
etag: "328-615fe71026123"
accept-ranges: bytes
strict-transport-security: max-age=15768000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| comptes-support.v6.army/orange/fonts/HelvNeue75_W1G.woff2 | 46.175.150.95 | 404 Not Found | 808 B |
URL GET HTTP/2comptes-support.v6.army/orange/fonts/HelvNeue75_W1G.woff2 IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/fonts/HelvNeue75_W1G.woff2 HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/html
content-length: 808
last-modified: Sat, 13 Apr 2024 18:20:22 GMT
etag: "328-615fe71026123"
accept-ranges: bytes
strict-transport-security: max-age=15768000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| comptes-support.v6.army/orange/fonts/HelvNeue55_W1G.woff | 46.175.150.95 | 404 Not Found | 808 B |
URL GET HTTP/2comptes-support.v6.army/orange/fonts/HelvNeue55_W1G.woff IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/fonts/HelvNeue55_W1G.woff HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/html
content-length: 808
last-modified: Sat, 13 Apr 2024 18:20:22 GMT
etag: "328-615fe71026123"
accept-ranges: bytes
strict-transport-security: max-age=15768000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| comptes-support.v6.army/orange/fonts/HelvNeue75_W1G.woff | 46.175.150.95 | 404 Not Found | 808 B |
URL GET HTTP/2comptes-support.v6.army/orange/fonts/HelvNeue75_W1G.woff IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/fonts/HelvNeue75_W1G.woff HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/html
content-length: 808
last-modified: Sat, 13 Apr 2024 18:20:22 GMT
etag: "328-615fe71026123"
accept-ranges: bytes
strict-transport-security: max-age=15768000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| comptes-support.v6.army/orange/fonts/HelvNeue55_W1G.ttf | 46.175.150.95 | 404 Not Found | 873 B |
URL GET HTTP/2comptes-support.v6.army/orange/fonts/HelvNeue55_W1G.ttf IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/fonts/HelvNeue55_W1G.ttf HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/html
last-modified: Sat, 13 Apr 2024 18:20:22 GMT
etag: W/"328-615fe71026123"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d | 46.175.150.95 | 200 OK | 12 kB |
URL User Request GET HTTP/2comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12021), with CRLF line terminators Hashc952a32d0ab5edf9315aab5c5957631c 3679244e7e4d3b3c47989edf3c67acf7dd7dd6f8 35744659a6e5908daa8b33fc7f3edde23238fa80290da53686c553d7e865c4fe
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:43:55 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.5.2/images/services_comm/Logo_MC_orange_fond_transparent_small.png |  0.0.0.0 | | 0 B |
URL GET cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.5.2/images/services_comm/Logo_MC_orange_fond_transparent_small.png IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c15d9d8fc98141b084d96f795046449b/auth-2.5.2/images/services_comm/Logo_MC_orange_fond_transparent_small.png HTTP/1.1
Host: cdn.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| c.woopic.com/logo-orange.png | 0.0.0.0 | | 0 B |
URL GET c.woopic.com/logo-orange.png IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /logo-orange.png HTTP/1.1
Host: c.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.17.2/icons/favicon-194x194.png | 0.0.0.0 | | 0 B |
URL GET cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.17.2/icons/favicon-194x194.png IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c15d9d8fc98141b084d96f795046449b/auth-2.17.2/icons/favicon-194x194.png HTTP/1.1
Host: cdn.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| comptes-support.v6.army/orange/css/css.css | 46.175.150.95 | 200 OK | 946 kB |
URL GET HTTP/2comptes-support.v6.army/orange/css/css.css IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
Size946 kB (946012 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/css/css.css HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/css
last-modified: Tue, 27 Aug 2019 01:17:14 GMT
etag: W/"5d64849a-e6f5c"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.15.1/images/services_comm/om_desktop.png | 0.0.0.0 | | 0 B |
URL GET cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.15.1/images/services_comm/om_desktop.png IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c15d9d8fc98141b084d96f795046449b/auth-2.15.1/images/services_comm/om_desktop.png HTTP/1.1
Host: cdn.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| c.woopic.com/Magic/o-icomoon.woff?1xeygc | 0.0.0.0 | | 0 B |
URL GET c.woopic.com/Magic/o-icomoon.woff?1xeygc IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Magic/o-icomoon.woff?1xeygc HTTP/1.1
Host: c.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://comptes-support.v6.army
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| comptes-support.v6.army/orange/fonts/HelvNeue75_W1G.ttf | 46.175.150.95 | 404 Not Found | 808 B |
URL GET HTTP/2comptes-support.v6.army/orange/fonts/HelvNeue75_W1G.ttf IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
File typeHTML document, ASCII text, with very long lines (866), with no line terminators Hashb45bdabc5c2538b0c4e5f352bcdfb585 5a97ce87ce8d3d86a043c1a5e68e968e20a1e146 c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/fonts/HelvNeue75_W1G.ttf HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/orange/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Tue, 23 Apr 2024 23:43:56 GMT
content-type: text/html
last-modified: Sat, 13 Apr 2024 18:20:22 GMT
etag: W/"328-615fe71026123"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.17.2/icons/favicon-16x16.png | 0.0.0.0 | | 0 B |
URL GET cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.17.2/icons/favicon-16x16.png IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c15d9d8fc98141b084d96f795046449b/auth-2.17.2/icons/favicon-16x16.png HTTP/1.1
Host: cdn.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| comptes-support.v6.army/orange/ | 46.175.150.95 | 302 Found | 41 kB |
URL User Request GET HTTP/2comptes-support.v6.army/orange/ IP46.175.150.95:443 ASN#50673 Serverius Holding B.V.
CertificateIssuerLet's Encrypt Subjectcomptes-support.v6.army FingerprintA2:27:A2:4F:25:8E:64:25:A6:1A:E2:F5:26:99:C5:A5:E8:40:9A:54 ValiditySat, 13 Apr 2024 17:22:19 GMT - Fri, 12 Jul 2024 17:22:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Orange | | urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /orange/ HTTP/1.1
Host: comptes-support.v6.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 23 Apr 2024 23:43:55 GMT
content-type: text/html; charset=UTF-8
content-length: 40625
location: https://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PHP/8.2.18, PleskLin
X-Firefox-Spdy: h2
|
|
| cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.5.2/images/services_comm/Logo_MC_noir_fond_transparent_small.png | 0.0.0.0 | | 0 B |
URL GET cdn.woopic.com/c15d9d8fc98141b084d96f795046449b/auth-2.5.2/images/services_comm/Logo_MC_noir_fond_transparent_small.png IP0.0.0.0:0
Requested byhttps://comptes-support.v6.army/orange/?return_url=https%3A%2F%2Fwww.orange.fr%2Fportail&_Authentication=0501d2de9ba16ff155226b1f49a716fc73c0170086fc0b6300fa33998b8c362b2546166b1a1d2de0856687a9855dcaeb14d2ef60a63b5f12d709aa2d
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c15d9d8fc98141b084d96f795046449b/auth-2.5.2/images/services_comm/Logo_MC_noir_fond_transparent_small.png HTTP/1.1
Host: cdn.woopic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://comptes-support.v6.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|