Report - www.rusinfo.no/antai.gouv/contraventions/

Report Overview

Visited public
2023-12-05 14:46:20
Tags
URL
www.rusinfo.no/antai.gouv/contraventions/
Finishing URL
rusinfo.no/antai.gouv/contraventions/
IP / ASN
195.159.29.116
#2116 Globalconnect As
Title
Site officiel unique de télépaiement | Amendes.gouv.fr

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.rusinfo.no	unknown	2021-04-22	2016-04-12 13:58:31	2023-12-05 12:24:54	507 B	410 B	195.159.29.116
rusinfo.no	unknown	2021-04-22	2017-02-02 15:18:13	2023-11-27 08:31:57	5.5 kB	329 kB	195.159.29.116
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-05 05:09:58	895 B	37 kB	104.17.24.14
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18 02:37:31	2023-12-05 05:18:59	442 B	50 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-12-05	medium	www.rusinfo.no/antai.gouv/contraventions/	Government of France

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	ScriptElement	49 kB	2023-03-07	2025-05-09
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 12:55 Times Seen74824 Hash 14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b Loading...

	rusinfo.no/antai.gouv/contraventions/	ScriptElement	917 B	2023-05-06	2024-10-04
Pretty URL rusinfo.no/antai.gouv/contraventions/ IP 195.159.29.116 ASN #2116 Globalconnect As Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-06 02:55 Last Seen2024-10-04 10:55 Times Seen20 Hash 8d8e58b3c90d8856205ef6755d8197a9 b505342e9092ffd50537767dfdc7f1c47f1c0cb6 e14e53ec467f4ebd0d4def0abc3d84fff06d65a6e6b4f5800d7786c9e7fd71b7 Loading...

	rusinfo.no/antai.gouv/contraventions/	ScriptElement	690 B	2023-03-07	2025-04-09
Pretty URL rusinfo.no/antai.gouv/contraventions/ IP 195.159.29.116 ASN #2116 Globalconnect As Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:24 Last Seen2025-04-09 10:55 Times Seen362 Hash 211419315eb4ab00915d6cb7561fd54d 1045495c66f37f45120fcd33adeed7b9e7ea19b7 23e329136b8c1126121c5bee19e209427e65ed0adbfce2f77f3417d74d4f5faa Loading...

	unknown	EventHandler	16 B	2023-04-10	2025-05-09
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:57 Last Seen2025-05-09 11:27 Times Seen56570 Hash 7c3c3ddeb80438dcbb3d081d2d00e152 5a4016732ee72ec77b4f6ab17047bcea6d2ea34d 321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/1.6.1/jquery.min.js	ScriptElement	91 kB	2023-03-07	2025-04-24
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/1.6.1/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-04-24 10:47 Times Seen780 Hash a34f78c3aecd182144818eb4b7303fda 6fca78dac2797c02d86a4bf6514eda398b7dbe62 c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.16.0/jquery.validate.min.js	ScriptElement	23 kB	2023-04-05	2025-05-09
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.16.0/jquery.validate.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 04:04 Last Seen2025-05-09 06:50 Times Seen893 Hash d099319695537f45ec0c6170e7474249 6f8064f9cfcb8c61b98bd386205372a1c92ab271 8e54b5540170341fcdef6cef9b3713a8a51bcbcdb3b558e2c52636e2280bb0c6 Loading...

HTTP Transactions (14)

URL IP Response Size

www.rusinfo.no/antai.gouv/contraventions/

195.159.29.116

301 Moved Permanently

169 B

URL User Request GET HTTP/2
www.rusinfo.no/antai.gouv/contraventions/
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Government of France

HTTP Headers

GET /antai.gouv/contraventions/ HTTP/1.1
Host: www.rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:02 GMT
content-type: text/html
content-length: 169
location: https://rusinfo.no/antai.gouv/contraventions/
x-nginx-request-time: 0.000
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/

195.159.29.116

200 OK

38 kB

URL User Request GET HTTP/2
rusinfo.no/antai.gouv/contraventions/
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (13780), with CRLF line terminators
Size
38 kB (38131 bytes)
Hash
6ae4aee5c304be92ac3870603fdd7692
c3697b98d9464b14bfd491c13dba01d110834c81
a722d4c2d6dd28664547df59294ebc2405685f4088f8a2d7d27988fdc980869c

HTTP Headers

GET /antai.gouv/contraventions/ HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:02 GMT
content-type: text/html; charset=UTF-8
content-length: 38131
x-powered-by: PHP/8.2.8
vary: Accept-Encoding
content-encoding: gzip
x-nginx-request-time: 0.052
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/img/logo-amendes-gouv.svg

195.159.29.116

200 OK

24 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/img/logo-amendes-gouv.svg
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23741), with no line terminators
Size
24 kB (23741 bytes)
Hash
e0e8bfea36c47ef31ec61169c8b0fb95
5f42e1a67ec658d358b289c42e39e86619cf798b
5932743bf769427d05289e72fb2bdb7cd1a5bc46f01248be159eb820fe27271d

HTTP Headers

GET /antai.gouv/contraventions/assets/img/logo-amendes-gouv.svg HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: image/svg+xml
content-length: 23741
last-modified: Fri, 22 Sep 2023 20:58:18 GMT
etag: "5cbd-605f8de304e80"
accept-ranges: bytes
x-nginx-request-time: 0.001
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css

195.159.29.116

200 OK

5.1 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
Unicode text, UTF-8 text, with very long lines (17791), with no line terminators
Size
5.1 kB (5128 bytes)
Hash
8ae319fab6c054d1e7ed3fe696b03022
c551f5d97e4d9af2b6db4368f00e72aef7854b01
413a62a0485dd260416f82190779c18141b1c82cd404471b1545cd1f1ef4bee0

HTTP Headers

GET /antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: text/css
content-length: 5128
last-modified: Fri, 22 Sep 2023 20:59:04 GMT
etag: "4583-605f8e0ee3600-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-nginx-request-time: 0.002
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.16.0/jquery.validate.min.js

104.17.24.14

200 OK

6.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.16.0/jquery.validate.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (22932)
Size
6.6 kB (6638 bytes)
Hash
9346ec27896981bc4c0b146cf327727a
21486194baa22eb1155fe98bf7af6314e7773cc7
50e497b00818378dcffe856b994f89947b620c66163768879c9b8a63d583f898

HTTP Headers

GET /ajax/libs/jquery-validate/1.16.0/jquery.validate.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 6638
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-5a1e"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 814823
expires: Sun, 24 Nov 2024 14:46:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zx8lngdqq%2BIOubHQdtF1aLLKjy8mszChSR9orduRDCIOhomNx0FRnS6xrge435eZaxgFqUPQ%2B2ttbUx70JWUUDJ1Jdys76hSUUNMDeWYBOrieF9qZPiOPXatT6gL5cL7cbGNZV%2FG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830d138d9f4056c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/1.6.1/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/1.6.1/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)
Size
28 kB (28293 bytes)
Hash
a34f78c3aecd182144818eb4b7303fda
6fca78dac2797c02d86a4bf6514eda398b7dbe62
c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776

HTTP Headers

GET /ajax/libs/jquery/1.6.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 28293
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-164ce"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 633911
expires: Sun, 24 Nov 2024 14:46:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aPB3Eqs5nM%2BSMbBgrGkpYDkP1JxTpU1IGEl2E4dsWdgKBp%2FLwG4Ujc4FLCjIB9BUlczqbkF06zDe6gag91TT9WbK2yR7nBoAY6Hu5mS8Bj%2B%2BRob%2FEgobwynTJ4nWASxV8n6wmRNz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830d138d9f3f56c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/css/banner.f9855031892baad8a497.svg

195.159.29.116

200 OK

5.7 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/css/banner.f9855031892baad8a497.svg
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (5685), with no line terminators
Size
5.7 kB (5685 bytes)
Hash
7b25d99263ff1e723ce005f26d699a34
32fb31aa78102c441b984a7f0482a4b8a7581a68
7e9f3dfeca57ef07d745b277027de295bab063f6fbab867b10dc6cd519a0a262

HTTP Headers

GET /antai.gouv/contraventions/assets/css/banner.f9855031892baad8a497.svg HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: image/svg+xml
content-length: 5685
last-modified: Fri, 22 Sep 2023 20:59:46 GMT
etag: "1635-605f8e36f1480"
accept-ranges: bytes
x-nginx-request-time: 0.001
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/css/bg-intro.9630b0c4c57c3d72d3ec.jpg

195.159.29.116

200 OK

41 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/css/bg-intro.9630b0c4c57c3d72d3ec.jpg
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1888x693, components 3\012- data
Size
41 kB (40712 bytes)
Hash
169592c9545ece607c4ac8323290b6be
af8319fb3eb451b428adf2e4c02e068525d9d486
a1fa2ccd5301b72338e02e3b1955b7c3347a27dcc6617bb1b0fcb1fac7069a86

HTTP Headers

GET /antai.gouv/contraventions/assets/css/bg-intro.9630b0c4c57c3d72d3ec.jpg HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: image/jpeg
content-length: 40712
last-modified: Fri, 22 Sep 2023 21:00:32 GMT
etag: "9f08-605f8e62cfc00"
accept-ranges: bytes
x-nginx-request-time: 0.001
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/img/favicon.ico

195.159.29.116

200 OK

2.2 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/img/favicon.ico
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Size
2.2 kB (2238 bytes)
Hash
2f34a3977599611db24405c819cb116f
4568ce43171f2a05903b38462891cd064ecc32e2
dd57f113a2eaa7ba3e6b1c507d22910ecd42437f9fef9577cfb8f4719cde59aa

HTTP Headers

GET /antai.gouv/contraventions/assets/img/favicon.ico HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:04 GMT
content-type: image/vnd.microsoft.icon
content-length: 2238
last-modified: Fri, 22 Sep 2023 20:58:40 GMT
etag: "8be-605f8df800000"
accept-ranges: bytes
x-nginx-request-time: 0.001
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/css/moyen-tel.980753f2b4b0302466cb.svg

195.159.29.116

404 Not Found

25 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/css/moyen-tel.980753f2b4b0302466cb.svg
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type

Size
25 kB (24576 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /antai.gouv/contraventions/assets/css/moyen-tel.980753f2b4b0302466cb.svg HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css
Cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:09 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
set-cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96; expires=Fri, 08 Dec 2023 14:46:08 GMT; Max-Age=259200; path=/; domain=rusinfo.no; HttpOnly
link: <https://rusinfo.no/wp-json/>; rel="https://api.w.org/"
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

104.18.11.207

200 OK

49 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT

File type
ASCII text, with very long lines (48664)
Size
49 kB (48944 bytes)
Hash
14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

HTTP Headers

GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:46:03 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 617, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 2021-06-08 14:29:21
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 395e10f82368220a7b7579d8f1c28956
cdn-cache: HIT
cf-cache-status: HIT
age: 1161896
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 830d138d9b62b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/js/45c4af5118.js

195.159.29.116

404 Not Found

88 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/js/45c4af5118.js
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type

Size
88 kB (87954 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /antai.gouv/contraventions/assets/js/45c4af5118.js HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:04 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
set-cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96; expires=Fri, 08 Dec 2023 14:46:03 GMT; Max-Age=259200; path=/; domain=rusinfo.no; HttpOnly
PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96; expires=Fri, 08 Dec 2023 14:46:03 GMT; Max-Age=259200; path=/; domain=rusinfo.no; HttpOnly
link: <https://rusinfo.no/wp-json/>; rel="https://api.w.org/"
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/css/lock.d72c3b80536f448a52ed.svg

195.159.29.116

404 Not Found

65 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/css/lock.d72c3b80536f448a52ed.svg
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type

Size
65 kB (65019 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /antai.gouv/contraventions/assets/css/lock.d72c3b80536f448a52ed.svg HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css
Cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
set-cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96; expires=Fri, 08 Dec 2023 14:46:06 GMT; Max-Age=259200; path=/; domain=rusinfo.no; HttpOnly
link: <https://rusinfo.no/wp-json/>; rel="https://api.w.org/"
X-Firefox-Spdy: h2

rusinfo.no/antai.gouv/contraventions/assets/css/moyen-app.e6b1c8e9e8920b4b6aa6.svg

195.159.29.116

404 Not Found

32 kB

URL GET HTTP/2
rusinfo.no/antai.gouv/contraventions/assets/css/moyen-app.e6b1c8e9e8920b4b6aa6.svg
IP
195.159.29.116:443
ASN
#2116 Globalconnect As

Requested by
https://rusinfo.no/antai.gouv/contraventions/
Certificate
IssuerLet's Encrypt
Subjectrustelefonen.no
FingerprintD7:E7:2E:EB:13:5A:47:0E:F9:3A:84:65:DC:74:9D:CA:13:4B:E4:08
ValidityTue, 05 Dec 2023 03:06:11 GMT - Mon, 04 Mar 2024 03:06:10 GMT

File type

Size
32 kB (32407 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /antai.gouv/contraventions/assets/css/moyen-app.e6b1c8e9e8920b4b6aa6.svg HTTP/1.1
Host: rusinfo.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusinfo.no/antai.gouv/contraventions/assets/css/styles.743d51bbe3793bb36c60.css
Cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.20.1
date: Tue, 05 Dec 2023 14:46:07 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
set-cookie: PHPSESSID=c46f508bc5e185bace2ded4bdb91dc96; expires=Fri, 08 Dec 2023 14:46:06 GMT; Max-Age=259200; path=/; domain=rusinfo.no; HttpOnly
link: <https://rusinfo.no/wp-json/>; rel="https://api.w.org/"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2