Report - cfspart.impots.gouv.fr/enp/Affichage_Document_PDF?idEnsua=9445C253917A08526E83536BC2614B0A047026A6963CA417AF2688D7709CE485

Report Overview

Submitted URL
cfspart.impots.gouv.fr/enp/Affichage_Document_PDF?idEnsua=9445C253917A08526E83536BC2614B0A047026A6963CA417AF2688D7709CE485
IP
145.242.11.27
ASN
#3215 Orange
Submitted
2024-03-28 08:34:05
Access
public
Website Title
Particuliers | authentification
Final URL
cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Tags
government tax france phishing
urlquery detections
Phishing - France Tax Agency

Detections

urlquery
29
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
servicesca.ocsp.certigna.fr	372775	2006-07-31	2016-10-25	2024-03-27	339 B	2.5 kB	109.197.245.20
cfspart.impots.gouv.fr	643420	2008-12-10	2017-02-05	2024-03-28	20 kB	254 kB	145.242.11.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	cfspart.impots.gouv.fr/templates/js/dyn/franceConnect.js	159 B	2023-03-10	2024-04-22
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/franceConnect.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:21:52 Last Seen2024-04-22 18:38:32 Times Seen23 Hash e1bdb29090bf90479997b5eabda963f2 dc88d844892f8b51970e31d8815689e7aa014cc1 dc35e548f9f5cdddeb342e5663624a19cf8f4df71260d362b92d5bc620fbdaba Loading...

	cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==	203 B	2023-03-07	2024-03-28
Pretty URL cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ== IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 23:12:23 Last Seen2024-03-28 09:34:05 Times Seen15 Hash c9981a84f05f4afd70ac9c8b85b7ec1d b4d414b7e7756bb56fef68a6e653b6749214ef25 9d60a744fd0b3b22692f26c8e530db39da71e0ff64091d48b6bcc22daca35033 Loading...

	cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==	949 B	2024-03-28	2024-03-28
Pretty URL cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ== IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 09:26:45 Last Seen2024-03-28 09:34:05 Times Seen2 Hash 3f9c6a9bb3b889ebf63954bcdf2f7934 43c3902e0b21602c887888acd2ea0d1a01e4c460 020cd4d40fb64427ff0d30bf8a63442fa7d51f8b18fbd9ae848039b448e309de Loading...

	cfspart.impots.gouv.fr/templates/js/bootstrap.min.js	33 kB	2023-03-07	2024-04-22
Pretty URL cfspart.impots.gouv.fr/templates/js/bootstrap.min.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:12:23 Last Seen2024-04-22 18:38:32 Times Seen29 Hash f0f6ac68931d683c1a5b99c2f2c7a2ef 30c7ac5eb61d2fe553aec2354eb5a8045ac0726e 75b52a07e8d4d433f8dc2dd323b7661d7945611c3258161ce37772f4dda615ad Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/messages.js	11 kB	2023-09-16	2024-03-28
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/messages.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 20:52:35 Last Seen2024-03-28 09:34:05 Times Seen7 Hash 5dda36c2fda52e9f07390fe8d141c357 7788b962caffcbab9e219e5f251541792d28c0af 2c8620339e2ec9cd32ce9930d823e857ad4bcc9c7e8fc1996a1c7021cab9bb00 Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/configuration.js	929 B	2023-03-10	2024-03-28
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/configuration.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:21:51 Last Seen2024-03-28 09:34:06 Times Seen20 Hash c1655b8bff588e7b1659d10f21233639 fdbe3771ea4dd5e17cdca41c991b2585a2b78ab4 64a83804a787c8b6c4ee5b82936a842d7d2b96355d891f1d02863bc26a2deed5 Loading...

	cfspart.impots.gouv.fr/templates/js/jquery.details.js	2.0 kB	2023-03-07	2024-04-22
Pretty URL cfspart.impots.gouv.fr/templates/js/jquery.details.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:12:23 Last Seen2024-04-22 18:38:32 Times Seen27 Hash c10f732cb103ddc9eecf769ec9f1a47c 9afe5279c4b275ff6d7e5215c2bb3c45a67a4a82 07a4d78d858bb93b3220fd4af3f599035ea5e4f932bfb53b1196ee328116c5b9 Loading...

	cfspart.impots.gouv.fr/templates/js/jquery.min.js	86 kB	2023-03-07	2024-04-27
Pretty URL cfspart.impots.gouv.fr/templates/js/jquery.min.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-27 10:59:44 Times Seen385024 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/auth2019v3.js	79 kB	2023-11-20	2024-03-28
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/auth2019v3.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-20 14:16:28 Last Seen2024-03-28 09:34:06 Times Seen6 Hash aa6568826221aa3ebe0dd820101f104c 51976a5ec9b39497a288278bfe2995acedf42b17 ae4f95487be04020d57577c7668636d869c388c8bc860f9299de550960193805 Loading...

	cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==	6.4 kB	2023-03-10	2024-03-28
Pretty URL cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ== IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 11:21:52 Last Seen2024-03-28 09:34:05 Times Seen10 Hash 04b82ade9306ff68376d389b01720848 53528573f631acb337de8b2ff741161357ed3d5e 3016659e468dc24394c1452d011ec444b9b7df4db62043469d2e00bba433852a Loading...

	cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==	378 B	2023-03-10	2024-03-28
Pretty URL cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ== IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 11:21:51 Last Seen2024-03-28 09:34:05 Times Seen13 Hash 261afa5a07c74c5521e5401d1a1a61a8 23afee32ac8d997bbec2ae00c01ca164d0cc5be5 1404908be4474920b88a871ade204f65810a38284a542640168f9357cd23ec91 Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/idContact.js	3.1 kB	2023-11-07	2024-03-28
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/idContact.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-07 23:06:19 Last Seen2024-03-28 09:34:06 Times Seen12 Hash 0cc752ee17ca1b1aec4e4c18a7d429bb 49fc4ba175b339ad2dd01ec3444f26bf94c883bf 196d95e958dd419e1b15a2992f6f32508f076c2c327d056d2952401d3118db35 Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/urls.js	571 B	2023-03-10	2024-03-28
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/urls.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:21:52 Last Seen2024-03-28 09:34:06 Times Seen19 Hash 0490574b4f675f9ceceafc8ec5aee4c6 ed0fe52a6382c698e9ca870363e58ab1e6dc7ca5 f9d32f35707df52561a55b4649691ba45a3b1d638ffbfdaf514d3c7b1751c49d Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/nav.js	2.3 kB	2023-09-16	2024-04-22
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/nav.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 20:52:35 Last Seen2024-04-22 18:38:32 Times Seen18 Hash 095ca41a1c8f7142c5b1f73f80455fcc c4e9f3b87dc4a0c8007348a9d01c2c6b9ee93c12 f0d79ac4bad049cb08f35a8c4b5f124d80a2bedcac6b8655b07bd83d2fe04ff3 Loading...

	cfspart.impots.gouv.fr/templates/js/dyn/matrix.js	679 B	2023-09-16	2024-04-22
Pretty URL cfspart.impots.gouv.fr/templates/js/dyn/matrix.js IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 20:52:35 Last Seen2024-04-22 18:38:32 Times Seen18 Hash 8ec37bc11ef9abd036cc3a9aea1b935e e4eec5dfe6441f795170aa4f32aa6577297d0310 e7d109b1e269fd76b1e8884347063a16a3c095e2cd68f1cbce73da32c68c669e Loading...

	cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==	3.4 kB	2023-03-10	2024-03-28
Pretty URL cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ== IP 145.242.11.27 ASN #3215 Orange Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 11:21:52 Last Seen2024-03-28 09:34:06 Times Seen7 Hash c4756770f81107117ae92a536be3f035 5872bfb2f1db604ca14b646d8895828af4241226 6f251a4d393a6039f377bd10be986fbc3606ad7ec8c40a74149c68f2bbd9edf4 Loading...

HTTP Transactions (29)

URL IP Response Size

servicesca.ocsp.certigna.fr/

109.197.245.20

2.4 kB

URL
servicesca.ocsp.certigna.fr/
IP
109.197.245.20:0
ASN
#35625 Eurofiber France SAS

File type
data
Size
2.4 kB (2377 bytes)
Hash
5340ca4489766e69aae9cd09682cfb98
4a0fbf65de38dd457ef0a12e9d8918d83c8e5b4e
db625b6df519c27f600b327817d22f28fdcb8aa40fe236a914ed0b77d32b3d94

HTTP Headers

POST / HTTP/1.1
Host: servicesca.ocsp.certigna.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/ocsp-response
Content-Length: 2377
Date: Thu, 28 Mar 2024 08:33:39 GMT

cfspart.impots.gouv.fr/enp/Affichage_Document_PDF?idEnsua=9445C253917A08526E83536BC2614B0A047026A6963CA417AF2688D7709CE485

145.242.11.27

302 Found

416 B

URL User Request GET HTTP/1.1
cfspart.impots.gouv.fr/enp/Affichage_Document_PDF?idEnsua=9445C253917A08526E83536BC2614B0A047026A6963CA417AF2688D7709CE485
IP
145.242.11.27:443
ASN
#3215 Orange

Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
HTML document, ASCII text
Size
416 B (416 bytes)
Hash
429cc97d3dc8885cb3b4063ea8c0885d
efb19eda064e1089b535c889bc540cdc3cd1e4af
584e68462af0d9ec45204bbdf80fae36f6be3037ad0ee09eb68838c0558d9922

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /enp/Affichage_Document_PDF?idEnsua=9445C253917A08526E83536BC2614B0A047026A6963CA417AF2688D7709CE485 HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Thu, 28 Mar 2024 08:33:39 GMT
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Set-Cookie: lemondgfipprodpart=_test_client; domain=cfspart.impots.gouv.fr; path=/
Pragma: no-cache
Connection: close
Location: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Content-Length: 416
Content-Type: text/html; charset=iso-8859-1

cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==

145.242.11.27

200 OK

13 kB

URL User Request GET HTTP/1.1
cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
IP
145.242.11.27:443
ASN
#3215 Orange

Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
HTML document, ASCII text, with very long lines (464)
Size
13 kB (13256 bytes)
Hash
5efcea1ccc13b2a76fef00e66e3d7c2e
31dde11ff64544b49f300d3191cedca5f3f4ae47
f6e3da955644bbfb2f714b515946433defefb20ab34a60ec9f4852260c4e0347

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ== HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lemondgfipprodpart=_test_client
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Set-Cookie: ctxcfs=30dd512f23ec000e61e281f729d85cc1; domain=cfspart.impots.gouv.fr; path=/
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' https://app.franceconnect.gouv.fr https://cfsfc.impots.gouv.fr ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Via: dpapusx036
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13256
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=ISO-8859-1

cfspart.impots.gouv.fr/templates/styles/bootstrap.min.css

145.242.11.27

200 OK

18 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/styles/bootstrap.min.css
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
ASCII text, with very long lines (64976)
Size
18 kB (17849 bytes)
Hash
a04c20e9d8e971c005c10a25372cb7c3
e42875a7c13d6f766ece94b27b636549edff7fe7
1831874c5d0edf9deec31365a40c7aa7a5e271717109bdb345390daef315735c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/styles/bootstrap.min.css HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "41b2a-1a442-590ff5bcd7feb"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 17849
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: text/css

cfspart.impots.gouv.fr/templates/js/dyn/auth2019v3.js

145.242.11.27

200 OK

13 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/auth2019v3.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (327)
Size
13 kB (12635 bytes)
Hash
aa6568826221aa3ebe0dd820101f104c
51976a5ec9b39497a288278bfe2995acedf42b17
ae4f95487be04020d57577c7668636d869c388c8bc860f9299de550960193805

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/auth2019v3.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 10 Jan 2023 09:05:54 GMT
ETag: "2c6f-13319-5f1e530f936d9"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 12635
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/idContact.js

145.242.11.27

200 OK

720 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/idContact.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
ASCII text
Size
720 B (720 bytes)
Hash
0cc752ee17ca1b1aec4e4c18a7d429bb
49fc4ba175b339ad2dd01ec3444f26bf94c883bf
196d95e958dd419e1b15a2992f6f32508f076c2c327d056d2952401d3118db35

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/idContact.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 13 Dec 2022 07:01:47 GMT
ETag: "2c65-c31-5efb03183e2bb"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 720
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/styles/commun.css

145.242.11.27

200 OK

1.8 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/styles/commun.css
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
assembler source, Unicode text, UTF-8 text, with very long lines (406)
Size
1.8 kB (1844 bytes)
Hash
4964f08183bccac130433472ef984b0a
753beace3167a2cf4648e0f3bce280d75f5f4966
88c20f31fe0c9e3e282c41a7b17ab9538043cb69622b41b639b200835b485eb9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/styles/commun.css HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "41b22-168c-5daf88d076dd9"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 1844
Last-Modified: Thu, 24 Mar 2022 15:32:16 GMT
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: text/css

cfspart.impots.gouv.fr/templates/styles/mire.css

145.242.11.27

200 OK

918 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/styles/mire.css
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
Unicode text, UTF-8 text
Size
918 B (918 bytes)
Hash
652abbe170c34e51ea1b8ae71a065bb2
cd0361a41f553289d10aed700580b2556d56eae9
e93bc93191ef5c3c6aa146c41135d36f46483e5f836ba36767ca8999570ed195

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/styles/mire.css HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "41b28-ab7-5bd3d976b5511"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 918
Last-Modified: Thu, 11 Mar 2021 07:18:34 GMT
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: text/css

cfspart.impots.gouv.fr/templates/styles/dac.css

145.242.11.27

200 OK

437 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/styles/dac.css
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
ASCII text
Size
437 B (437 bytes)
Hash
02f2819a5b62c5d07e28c0591d1f3ea0
c1d9d8977d3c37ed6c5e59c596804cf43b7b02f0
cece61d8fd5fbeb96fa77967e4bbc4aa19e4111468133b5cd1521c1b823b43bc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/styles/dac.css HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "41b27-303-5a2208bf9719f"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 437
Last-Modified: Tue, 31 Mar 2020 06:19:14 GMT
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: text/css

cfspart.impots.gouv.fr/templates/js/bootstrap.min.js

145.242.11.27

200 OK

9.0 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/bootstrap.min.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32002)
Size
9.0 kB (8991 bytes)
Hash
f0f6ac68931d683c1a5b99c2f2c7a2ef
30c7ac5eb61d2fe553aec2354eb5a8045ac0726e
75b52a07e8d4d433f8dc2dd323b7661d7945611c3258161ce37772f4dda615ad

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/bootstrap.min.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c5d-8208-590ff5bce2fb3"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 8991
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/messages.js

145.242.11.27

200 OK

2.9 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/messages.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
Unicode text, UTF-8 text
Size
2.9 kB (2918 bytes)
Hash
ab3812930a4a05a5534af1b3aa1cb394
8b722bd53b824d550c8c1e788dccf8367c68f5c7
2e4aebd08758860dae6add24f14ea13f7efb2741e507fc5e49448fb842194ff5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/messages.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 14 Dec 2022 13:26:08 GMT
ETag: "2c78-2be3-5efc9addfb372"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 2918
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/urls.js

145.242.11.27

200 OK

248 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/urls.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
ASCII text
Size
248 B (248 bytes)
Hash
0490574b4f675f9ceceafc8ec5aee4c6
ed0fe52a6382c698e9ca870363e58ab1e6dc7ca5
f9d32f35707df52561a55b4649691ba45a3b1d638ffbfdaf514d3c7b1751c49d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/urls.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
ETag: "2c63-23b-590ff5bcdf903"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 248
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/configuration.js

145.242.11.27

200 OK

467 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/configuration.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
ASCII text
Size
467 B (467 bytes)
Hash
c1655b8bff588e7b1659d10f21233639
fdbe3771ea4dd5e17cdca41c991b2585a2b78ab4
64a83804a787c8b6c4ee5b82936a842d7d2b96355d891f1d02863bc26a2deed5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/configuration.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 08 Apr 2020 13:41:20 GMT
ETag: "2c66-3a1-5a2c7a7bf45ed"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 467
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/franceConnect.js

145.242.11.27

200 OK

126 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/franceConnect.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
ASCII text
Size
126 B (126 bytes)
Hash
e1bdb29090bf90479997b5eabda963f2
dc88d844892f8b51970e31d8815689e7aa014cc1
dc35e548f9f5cdddeb342e5663624a19cf8f4df71260d362b92d5bc620fbdaba

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/franceConnect.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
ETag: "2c67-9f-590ff5bce08a3"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 126
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/jquery.details.js

145.242.11.27

200 OK

952 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/jquery.details.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1908)
Size
952 B (952 bytes)
Hash
c10f732cb103ddc9eecf769ec9f1a47c
9afe5279c4b275ff6d7e5215c2bb3c45a67a4a82
07a4d78d858bb93b3220fd4af3f599035ea5e4f932bfb53b1196ee328116c5b9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/jquery.details.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c58-7d0-590ff5bcde963"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 952
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/matrix.js

145.242.11.27

200 OK

327 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/matrix.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
Unicode text, UTF-8 text
Size
327 B (327 bytes)
Hash
8ec37bc11ef9abd036cc3a9aea1b935e
e4eec5dfe6441f795170aa4f32aa6577297d0310
e7d109b1e269fd76b1e8884347063a16a3c095e2cd68f1cbce73da32c68c669e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/matrix.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 22 Mar 2023 08:43:28 GMT
ETag: "2bee-2a7-5f779276f702f"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 327
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/js/dyn/nav.js

145.242.11.27

200 OK

922 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/dyn/nav.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
JavaScript source, ASCII text
Size
922 B (922 bytes)
Hash
095ca41a1c8f7142c5b1f73f80455fcc
c4e9f3b87dc4a0c8007348a9d01c2c6b9ee93c12
f0d79ac4bad049cb08f35a8c4b5f124d80a2bedcac6b8655b07bd83d2fe04ff3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/dyn/nav.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 22 Mar 2023 08:43:50 GMT
ETag: "3222-91f-5f77928c24a28"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Content-Length: 922
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/images/Small-logoSMART.png

145.242.11.27

200 OK

2.3 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/Small-logoSMART.png
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Size
2.3 kB (2347 bytes)
Hash
c546c9a78e206d482076fae524cedbe5
d9ad14007be975fb477763f26ce653e332b56c70
dfcae6bf0ca22253e333881e0bf7eb42d14057eb00024a5bd19943b04cbb95ec

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/Small-logoSMART.png HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c60-92b-5daf8930c80a8"
Accept-Ranges: bytes
Content-Length: 2347
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Thu, 24 Mar 2022 15:33:57 GMT
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/png

cfspart.impots.gouv.fr/templates/images/logo-fc.svg

145.242.11.27

200 OK

4.0 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/logo-fc.svg
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
4.0 kB (4049 bytes)
Hash
f3c02532347779d974e702c09cf85019
9eec54318e9c5f892342b7c259c081dd88e6ea4b
f38f88db94a67b5fcc8f90965a6623a509e35cb81b6b252f0c9d7fdd29ff1a88

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/logo-fc.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c39-3645-590ff5bcd9373"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 4049
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml

cfspart.impots.gouv.fr/templates/js/jquery.min.js

145.242.11.27

200 OK

30 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/js/jquery.min.js
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (29822 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/js/jquery.min.js HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c5b-14e4a-590ff5bce23fb"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 29822
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: application/javascript

cfspart.impots.gouv.fr/templates/images/spi.svg

145.242.11.27

200 OK

1.6 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/spi.svg
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.6 kB (1619 bytes)
Hash
0d59ec026a9708271caca148c56959df
02cc9a6887e9ca7ac69729d499813436157546a4
2be11b4cf348ebdb13674d8cf0d1938df9c71f0f64fb0fb70fa08ed40830f684

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/spi.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c37-156d-590ff5bcd8ba3"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 1619
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml

cfspart.impots.gouv.fr/templates/images/spi1.svg

145.242.11.27

200 OK

979 B

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/spi1.svg
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
979 B (979 bytes)
Hash
9b3c39ed6edf582c7f571289b4dbc725
28abdf9efc2cf91ec83f48d29313de71198905c0
434c00e8f522092a173a70f7f6e95747cf8c2b75328bdf76c6ed1e4b2039cbbc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/spi1.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c6e-fb8-590ff5bcdd5db"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 979
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive
Content-Type: image/svg+xml

cfspart.impots.gouv.fr/templates/images/num_acces.svg

145.242.11.27

200 OK

1.9 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/num_acces.svg
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.9 kB (1900 bytes)
Hash
44f52f8bcf815b2a962c029c9fb41440
c8608e65a9b82d02ae133834543c28aecd103325
880cbec4f5672334414f9b979a09ad51f7158c92a694bbabfc8a83538c8e0e2e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/num_acces.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c3f-190e-590ff5bcd9b43"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 1900
Last-Modified: Mon, 26 Aug 2019 06:35:14 GMT
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: image/svg+xml

cfspart.impots.gouv.fr/templates/images/bloc-marque.svg

145.242.11.27

200 OK

5.7 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/bloc-marque.svg
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
5.7 kB (5743 bytes)
Hash
4257fb0a56ea55bc4b76ea2fe46b8b9d
d33741728f77502ffef2144609aa61ee920eefbb
90d8552964c8e804a6dea1870bfd34d3114389e6c28b725bcdec63808b75c8a6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/bloc-marque.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/templates/styles/commun.css
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2fb9-4608-5bd3d9340228b"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 5743
Last-Modified: Thu, 11 Mar 2021 07:17:24 GMT
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

cfspart.impots.gouv.fr/templates/images/logo_impots.svg

145.242.11.27

200 OK

1.3 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/logo_impots.svg
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.3 kB (1340 bytes)
Hash
3d338ec68af63179fa417a191e8a012d
540f4fedc21e0b7dcb7252233d94c62b747fb88d
c4502e1bffc9155988eeb261ae88885e93211e73cad60005d710ba19ac860b5e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/logo_impots.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/templates/styles/commun.css
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2fb8-d10-5bd3d933ef5c3"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 1340
Last-Modified: Thu, 11 Mar 2021 07:17:24 GMT
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive
Content-Type: image/svg+xml

cfspart.impots.gouv.fr/templates/polices/open-sans-latin-ext-regular.woff2

145.242.11.27

200 OK

19 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/polices/open-sans-latin-ext-regular.woff2
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19392, version 1.0
Size
19 kB (19392 bytes)
Hash
6e2308ee6037e901e59de209310cf5ff
cea4c2bb4465f3c1a7692d2b218c3b1a41b7426a
516c7b2926dbd461e33f19ff05db8587e5990184dba657483d5a569cc099a8ee

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/polices/open-sans-latin-ext-regular.woff2 HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/templates/styles/commun.css
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "41b6d-4bc0-5daf88ff0684c"
Accept-Ranges: bytes
Content-Length: 19392
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Thu, 24 Mar 2022 15:33:05 GMT
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: text/plain; charset=utf-8

cfspart.impots.gouv.fr/templates/polices/dgfip_dgfipicons.woff

145.242.11.27

200 OK

94 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/polices/dgfip_dgfipicons.woff
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
Web Open Font Format, TrueType, length 93700, version 1.0
Size
94 kB (93700 bytes)
Hash
53f606d531c08964174e91d4c4dfb345
daf42355520971c9b707756869f269c77e0eddf4
254798574aeb4e94ef4b45f271e804f0b63eb45def80468d9af516213ebe13dd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/polices/dgfip_dgfipicons.woff HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/templates/styles/commun.css
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "41b17-16e04-598283377035c"
Accept-Ranges: bytes
Content-Length: 93700
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 25 Nov 2019 09:15:13 GMT
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: application/x-font-woff

cfspart.impots.gouv.fr/templates/images/favicon-152.png

145.242.11.27

200 OK

5.3 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/favicon-152.png
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced
Size
5.3 kB (5270 bytes)
Hash
b1479c387a9643444ab8c0ea00700b85
4393e635ea58ecc112e9a305937758c9312eec32
691587ccf86f22dfe92da5c239d5b1d4321e700a91f533baeab55387bc3164c0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/favicon-152.png HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c3e-1496-5efb0561ee618"
Accept-Ranges: bytes
Content-Length: 5270
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 13 Dec 2022 07:12:01 GMT
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
Content-Type: image/png

cfspart.impots.gouv.fr/templates/images/favicon.ico

145.242.11.27

200 OK

1.2 kB

URL GET HTTP/1.1
cfspart.impots.gouv.fr/templates/images/favicon.ico
IP
145.242.11.27:443
ASN
#3215 Orange

Requested by
https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Certificate
IssuerDHIMYOTIS
Subjectcfsfc.impots.gouv.fr
Fingerprint93:3D:68:AE:CC:37:B5:F4:EF:A7:BF:CF:F6:FD:3A:3F:63:7D:F9:FF
ValidityMon, 03 Jul 2023 22:00:00 GMT - Sat, 03 Aug 2024 21:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
4c2c39d7cb584994b956b7001fc462e1
82c00353c1ca67d925e65fd6022cd0ccbc0f5c3c
99af879888a29feeec095725f74e18cd070de29e7f1b4a35f20746fa45382c21

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - France Tax Agency

HTTP Headers

GET /templates/images/favicon.ico HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cfspart.impots.gouv.fr/LoginAccess?op=c&url=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyL2VucC9BZmZpY2hhZ2VfRG9jdW1lbnRfUERGP2lkRW5zdWE9OTQ0NUMyNTM5MTdBMDg1MjZFODM1MzZCQzI2MTRCMEEwNDcwMjZBNjk2M0NBNDE3QUYyNjg4RDc3MDlDRTQ4NQ==
Cookie: lemondgfipprodpart=_test_client; ctxcfs=30dd512f23ec000e61e281f729d85cc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:33:39 GMT
Server: Apache
ETag: "2c33-47e-5efb0403ea906"
Accept-Ranges: bytes
Content-Length: 1150
Via: dpapusx036
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 13 Dec 2022 07:05:54 GMT
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/x-icon

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML