urlquery.net
Investigate/Report/4875b2c8-a268-414e-a2d1-34c9643aee7f
WEBSITE ANALYSIS REPORT

http://app-bbe4ddd5-796b-43d3-9877-33d87e8fa3f7.cleverapps.io/ANTAI/am/infospage.php

public
Report tags
government tax france phishing
Submit tags
openphish
Request review
Phishing detected

3 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document57.2 KB490 ms2 alerts
GET200font14.0 KB263 ms1 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://www.amendes.gouv.fr/assets/fonts/open-sans/open-sans-regular.woff2

IP / ASN

France 185.8.53.118

AS47957 · Worldline IGSA SA

Requested by
https://app-bbe4ddd5-796b-43d3-9877-33d87e8fa3f7.cleverapps.io/ANTAI/am/infospage.php

Resource information

File type
Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
MIME type
font/woff2
First seen (UTC)
11 Apr 2023 · 14:14:03.000 UTC
Last seen (UTC)
24 Oct 2026 · 13:03:26.874 UTC
Times seen
24171
Size
14.0 KB (14380 bytes)
MD5
33543c5cc5d88f5695dd08c87d280dfd
SHA1
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
SHA256
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52

Certificate information

Issuer
DHIMYOTIS · Certigna Services CA
Subject
www.amendes.gouv.fr
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
19:FA:05:CB:FB:F7:13:5A:01:6B:87:A7:C7:A7:A7:EA:A3:39:04:D1
Valid from
Wed, 06 May 2026 00:00:00 GMT
Valid until
Mon, 03 Aug 2026 23:59:59 GMT

Technology fingerprints

  • HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
urlquery Phishing - French Tax AgencymediumPhishing

HTTP headers

Request headers

GET /assets/fonts/open-sans/open-sans-regular.woff2 HTTP/1.1
Host: www.amendes.gouv.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://app-bbe4ddd5-796b-43d3-9877-33d87e8fa3f7.cleverapps.io/
Origin: https://app-bbe4ddd5-796b-43d3-9877-33d87e8fa3f7.cleverapps.io
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 12 Jul 2026 18:34:55 GMT
content-type: font/woff2
last-modified: Mon, 27 Apr 2026 13:08:47 GMT
vary: Accept-Encoding
etag: W/"69ef5fdf-382c"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload;
X-Firefox-Spdy: h2
GET200font14.5 KB239 ms1 alerts
GET200stylesheet17.2 KB30 ms2 alerts
GET200script87.8 KB88 ms—
GET200script5.7 KB27 ms—
GET200script3.5 KB29 ms2 alerts
GET200script119.5 KB123 ms2 alerts
GET200script451.4 KB187 ms2 alerts
GET200script360.4 KB144 ms2 alerts
GET200img23.2 KB306 ms2 alerts
GET404font236 B454 ms2 alerts
GET404img0 B0 ms—
GET404img236 B438 ms2 alerts
GET404img236 B431 ms2 alerts
GET404font236 B407 ms2 alerts
GET200img2.2 KB51 ms1 alerts
17 visible / 17 matching / 17 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot