| firefox.settings.services.mozilla.com/v1/ |  54.230.111.118 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP54.230.111.118:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QrhbX5tHgkaEIq3nABdjjHebqJ62KwHzuevch25cVq9RVJVKUaoiOQ==
Age: 102670
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash282f6e1328452c1cb41f6a6272fff757 20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262 6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7766
Expires: Thu, 06 Oct 2022 22:27:54 GMT
Date: Thu, 06 Oct 2022 20:18:28 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash4ab7d8709d334de0e46dcb86aabfbff1 f221138a8ad9d0bfa3c054370dcdb363a67dc310 b91d37f606eaf448b9c7dfc05566a11de004ce44503409e1a776288ee2622805
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15106
Expires: Fri, 07 Oct 2022 00:30:14 GMT
Date: Thu, 06 Oct 2022 20:18:28 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: E1QZH3YrWd0hr2fsFpczk68lHPioDrA1J3BkPbJhYtzga6gL/EYZ30YMAoC8/7afoB9sjz60UPQ=
x-amz-request-id: R3YEYHCVJE4V40MG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 19:58:52 GMT
age: 1176
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 20:18:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.usertrust.com/ |  104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash7c02cd3203d8dde3e0e884dd2f2f864d da0fe9770242389bdf56e8b9f8de6d3df308fa20 800c179d1448ee622b5069a945627b4f97d9a30b3027fcd0c8c91930bf38a565
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 19:52:09 GMT
Expires: Thu, 13 Oct 2022 19:52:08 GMT
Etag: "da0fe9770242389bdf56e8b9f8de6d3df308fa20"
Cache-Control: max-age=602619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756116219c73b4f3-OSL
|
|
| www.securitepro.fr/bnpp/login/login.seam |  185.136.42.43 | 200 OK | 10 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/login/login.seam IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (4184) Hash515e76885f6fef24bff11c021d4d4093 cd277d4f81ab184082ef9b0178a2283306dd1e9c dc2e6ca4df51b1960595f807a10fead7b2ac2209cb84f32fc0679fbf9c4f2c35
| Analyzer | Verdict | Alert |
|---|
| openphish | BNP Paribas | | | fortinet | Phishing | |
GET /bnpp/login/login.seam HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:28 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Content-Type: text/html;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Set-Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2; Path=/bnpp; Secure; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 1.3 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (6767), with no line terminators Hasha9ae7620ca1e2a53a88cd531deafa77c 27bb5aebb085174ed651cc8a28d6769cb98a9ef2 d1849eef605f7c843bce4c0be72e42466deaa6ab6699c66fdbcad5b64c9225f1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/css;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1252
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org.ajax4jsf.javascript.PrototypeScript | 185.136.42.43 | 200 OK | 25 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org.ajax4jsf.javascript.PrototypeScript IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (2482) Hashbd7b7b15aa03ebec759ce16266bed42e fb5cd912f1f284270dca704004d9f593e048980d 263f93b8a1213b0e28557b3733413a1897a3f59cb1e9f2370cb640bfef1e9072
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org.ajax4jsf.javascript.PrototypeScript HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/modalPanel.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 709 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/modalPanel.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (1871), with no line terminators Hashb263b18353c81191e9e05a628a1b936f b68e981511984f7d3811e5f5c71b2706da920e96 ca36a95e4177ee93985ea5f84e5681164429ff1902ca1cfed9aabafe2a69682d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/modalPanel.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/css;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 709
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/browser_info.js | 185.136.42.43 | 200 OK | 436 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/browser_info.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (335) Hash2a45f3c530c02f2cee8a44028cc3c6be 1be5c1a2aab4acce54536e37e517fdab4f99ec8a 6c339cc635dff3619c70c8fe70ab9fe823aa8aa25607d28ab4c85abd75a1ba80
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/browser_info.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 436
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/utils.js | 185.136.42.43 | 200 OK | 3.1 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/utils.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (1297) Hash3a82a6eccbba6c8dfc72f7929b1c500b 9ae0bafbac94da079d7d35f19ae345da129a90c4 bf191a8841eccc24894529b4a78ae3df8ae969b37f023d2ee772a597136c039c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/utils.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3132
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/modalPanel.js | 185.136.42.43 | 200 OK | 5.4 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/modalPanel.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (1793) Hash0915331322887bd1a104a36026a594a6 d35e696eda19c3952070869b46991f3eadb073fb 0d355e4d744ed5d0e8b849a22a179f44090c9b1654ca3a72d04479c7191f411e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/modalPanel.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/modalPanelBorders.js | 185.136.42.43 | 200 OK | 1.5 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/modalPanelBorders.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (3727) Hash3434ad73af4bcd09131075a04382d211 d45f159f634e621de3b911ef3e856364b0cab417 db67db90c5fa5b6c0d139bb0de093cc035d6011602ef4184a362cf780ca8489f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/modalPanelBorders.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 54.230.111.118 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP54.230.111.118:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 19:29:41 GMT
Expires: Thu, 06 Oct 2022 20:07:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 72vekwlxvUSU44hPNnRYBKT5tIV3j2Jjgs1V_6IseNdoDeXLTIlfYQ==
Age: 2928
|
|
| www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3css/toolBar.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 288 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3css/toolBar.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (396), with no line terminators Hashfc52c88701d2547f9fb7a431baba8506 e81b97dc8b15a7072dcb9996fa461a9a6e9a4daf 7fcef52dfa49b2c613e0ac2d4a580203d09a2238cc354679f850073233a384eb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/s/3_3_1.SP3css/toolBar.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/css;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 288
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/css/msg.css | 185.136.42.43 | 200 OK | 120 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/css/msg.css IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with CRLF line terminators Hash97674b8e75eac8cdde47e9ce6a5a28f4 b5c1954c844c56a1cce32a03365ecb4ea8671fa5 ea1a89f997e355eca34213f471addfb0b9a4aee6bdc5f5242ae5c1ee0cc3476b
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/css/msg.css HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/css
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 120
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org.ajax4jsf.javascript.AjaxScript | 185.136.42.43 | 200 OK | 18 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org.ajax4jsf.javascript.AjaxScript IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (1993) Hashc885561a2410f38e9070436897ef3a26 b6ae832b1233728c2ed2dda1a8991925b0f63f5d edb57e090824bc59d714319b20f7e357ca6957890c77f147593f849fea07b0b5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org.ajax4jsf.javascript.AjaxScript HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:28 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/css/msgs.css | 185.136.42.43 | 200 OK | 128 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/css/msgs.css IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with CRLF line terminators Hash1edeb1d5503e6dbfdc08f80aaaa94dae a80d50f58257ee06add4387c8b00c9dc31f18b44 127af5697690a2bf5205da6eff9cd08b78b80214a037e145650f58b5dcad6ed1
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/css/msgs.css HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/css
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 128
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/events.js | 185.136.42.43 | 200 OK | 779 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/events.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (916) Hash51c1b77eb156a2689e7b4acf2ccad1cb f33f4108fd9d41ab33ca95441ed3a1e8133cc320 499b323f01b77dceaa4b1cda561d93fcd031429919e7324158f0bf0fd2f84a36
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/events.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 779
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/json/json-dom.js | 185.136.42.43 | 200 OK | 667 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/json/json-dom.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeexported SGML document, ASCII text, with very long lines (499) Hash83f3eb8df46fccfaf79d32b8143cac16 0de4dd60b2d4c61fb14c3d7ad3c3fa224186c1f5 26e71c372d8229033b4c9922391da262b6d573bed9659f26bd35f3c8cd711992
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/json/json-dom.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/scriptaculous/effects.js | 185.136.42.43 | 200 OK | 7.0 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/scriptaculous/effects.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (8210) Hashd78e6c170f7129838d60edfe2b3bf40c 8614eb284fe0ae1b9e06b28f1dad9881fde4c288 02677a13780a53ed8ff2ca165b80ef39ec6fc5f604dd22f8cc9279bca2fa0c22
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/scriptaculous/effects.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/JQuerySpinBtn.js | 185.136.42.43 | 200 OK | 1.0 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/JQuerySpinBtn.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (710) Hash280d2464b2f5b15831843ecd7e7f74cd 3fce2e334c411eb5a13fbfe3830b8e5f52cfdd7d 7796216ec8972a8e64ce997d8efd742e06a3d502ca3efeea95943eafebceb9c5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/JQuerySpinBtn.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/calendar.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 1.4 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/calendar.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (7323), with no line terminators Hash34ce2ea47457b463781f16f55045d4a9 4f8cf0bfb5ec2838e7a618a60019950afe8dd09f 32e0e7425bc11a21334bc246c0b3ed73df5c73d30622b3e4221096cb4a3a431a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/calendar.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/css;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3css/panel.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 300 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3css/panel.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (567), with no line terminators Hashc8adebab0ee6f0cb13c7370924b48c08 8fbe670ee6a81e4b2008f6bc26a7dd9b1c81d35d 4a22e5e3f4c13d3c3db79efea536e5f3decbdde0af264b6986182dea451b324a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/s/3_3_1.SP3css/panel.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/css;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 300
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/ajax4jsf/javascript/scripts/form.js | 185.136.42.43 | 200 OK | 875 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/ajax4jsf/javascript/scripts/form.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeAlgol 68 source text\012- Pascal source, ASCII text, with very long lines (408) Hash1cdb86285efa35dd8d2c684020e9905f f356fa042843e11af27ed5d511c0b92721f6f909 1fd3cd5af3f2f14559595279a19cb8ae655ef4c192c8ff0a4cd64b839323fa85
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/ajax4jsf/javascript/scripts/form.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/jquery/jquery.js | 185.136.42.43 | 200 OK | 22 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/jquery/jquery.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (1857) Hashb36add0d3fd8696156a0f524bb370b02 7d7733a278a4946ca89f6cf8af5812e4f35188f5 5148c329e4523b182a3b878e8e22ed72de9cd2f72344d403798dbec21c17d689
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/jquery/jquery.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21938
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/available.js | 185.136.42.43 | 200 OK | 783 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/available.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (994) Hash69b68c6a31a399b2c398a0984a60a3f7 a3d6066799eacd749f42b527f90a400373494aca ad4ac7d26d8f061d9abfe94ec35d8b8c5a7305385aa28434b276e47a5805792f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/available.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/calendar.js | 185.136.42.43 | 200 OK | 14 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/calendar.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (9020) Hash91ad69e971722e5de95530d084f61ba4 57f493054fdc3dfc90f41372cf33f722c92e2c8b 47dd492034edc1c0c7c85dfe26ee370b1ff932cffbe2e7ca02a2e592eb41ec10
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/calendar.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/script/controlUtils.js | 185.136.42.43 | 200 OK | 448 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/script/controlUtils.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (716) Hash6551f5252edba41d14743c76779c2998 8588f48218ed461488bfd71de2befa5a55e62c0b de0d37b6cbefe817d4f95964b252e5e2e35bb229ac1c527c8570747ffd9edc75
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/script/controlUtils.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/skinning.js | 185.136.42.43 | 200 OK | 591 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/skinning.js IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (471) Hash062e89529b5125ec2a7c62960972cbde f19a8877865245d5a5de6730864450ea1a946801 7fa7c591f87dee2b4cee1f952c3f89f3ea7963262c89b2f0d6630db5756976fe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org/richfaces/renderkit/html/scripts/skinning.js HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/javascript
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 5.0 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
Hashcf7de23d233c0ea566b4e7586ad7db74 0941db490679623cac77608567f2244695845bae 1d0e7de4d00d17f811c0fca869a6ded01f15ced92ad6b615176ffd385c83e952
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"27123-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: text/css
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/css/spc.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 2.8 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/css/spc.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
Hash806dd797231e74576fc8128c4613dc6c 98313abe2c6476ff348df008037cc3fa96aaf1c1 baad578389d052bb5970cf8cfd4cce0c33555747d3f867091a4f086c82bc145e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/css/spc.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"13043-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: text/css
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/css/facebox.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 606 B |
URL HTTP/1.1www.securitepro.fr/bnpp/css/facebox.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeUnicode text, UTF-8 (with BOM) text Hash0223f6694f7524cba7132c746feb499a eda8369c8da11b6c0bc221a1ca96215a0ea6f79b d94f41020d7a65e9866f2e737b95bcee744a037d92b1307c63ee1d987a252e87
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/css/facebox.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"1710-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: text/css
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 606
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/css/style2.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 659 B |
URL HTTP/1.1www.securitepro.fr/bnpp/css/style2.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
Hash495ffa16f7162c9d27ff8a10058a1a83 056b1d80b7e6112319fa3e87d709279ca3c9a789 6899950f48b809b236eb92d9af6c6006c86966493a53bd1071d8299376a227c9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/css/style2.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"1755-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: text/css
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 659
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/images/login/logo.png | 185.136.42.43 | 200 OK | 6.6 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/images/login/logo.png IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 289 x 123, 8-bit colormap, non-interlaced\012- data Hashc1754363227461f80705c9b1d3c50ea5 eeea925edb92d8158c1139dfa504ccb1aa80240f 81273dd2ec54938fe9f009c5f2d27a1f9ff89a8c4412dffd9258b8ee5cc42aec
GET /bnpp/images/login/logo.png HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"6867-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6553
Keep-Alive: timeout=15, max=92
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/images/tel.png;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 912 B |
URL HTTP/1.1www.securitepro.fr/bnpp/images/tel.png;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 26 x 29, 8-bit/color RGB, non-interlaced\012- data Hash3beae5a62e6aa93b606915d28357c7c4 afb4342652ac029ffff551c52e8032ab493803c5 d30e1f1252fe36a00d3f0fe540c80e37e3e55ae362518ac149d8d60e5b094104
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/images/tel.png;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"889-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 912
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/images/picto/waiting.gif | 185.136.42.43 | 200 OK | 4.6 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/images/picto/waiting.gif IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeGIF image data, version 89a, 48 x 48\012- data Hashfbd9ca324cb953404e3a1dc97d9d59a8 b06f9cbcf5ee764ca044079deca9cf5108f60370 5bb28df607e199ed3b7f0855261c3121c231fa9964b14ed40eaf6f9e83b72699
GET /bnpp/images/picto/waiting.gif HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"4931-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/gif
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3images/spacer.gif | 185.136.42.43 | 200 OK | 43 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3images/spacer.gif IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /bnpp/a4j/g/3_3_1.SP3images/spacer.gif HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: image/gif
Content-Length: 43
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/images/cocher.png;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 237 B |
URL HTTP/1.1www.securitepro.fr/bnpp/images/cocher.png;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 19 x 21, 8-bit/color RGB, non-interlaced\012- data Hash51cee523efd313ef23bcaf663a44e3c0 74b848f6b3110f25f7f56800fcbfafd981c41260 6389ae65d3825636ade49af5653f7d2f16b4db97c1f8e5be5aaebf2e8b27bba0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/images/cocher.png;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"222-1601118622000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:22 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 237
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash8be5570b9a5ca76c580da007a824b029 38840f2ac6476bdd5608121c5653e338c7ad9715 0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3782
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 20:18:29 GMT
Last-Modified: Thu, 06 Oct 2022 19:15:27 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| www.securitepro.fr/bnpp/images/login/numero.png | 185.136.42.43 | 200 OK | 26 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/images/login/numero.png IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 326 x 162, 8-bit/color RGBA, non-interlaced\012- data Hashd6f278e06890695b6a8e34cc60e7aa34 eee8a6eb1d5206a8468501383a68e210413be8b3 4f6d0075c5a32573466e8d01e4b2c24b7020175cafdd5283f0cc4c6c5a272836
GET /bnpp/images/login/numero.png HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"26172-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/css/img/picto/fleche_index.png | 185.136.42.43 | 200 OK | 246 B |
URL HTTP/1.1www.securitepro.fr/bnpp/css/img/picto/fleche_index.png IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 7 x 17, 8-bit/color RGBA, non-interlaced\012- data Hashf9ddce3e53b60e7276a12675ec02f76e 2a1757d3fa212b69c4f62d7b610c10155200adc6 004f3e26fd9e6000dc63288da493d5ed5f5fb09fcb07942299400276fd6a4cc6
GET /bnpp/css/img/picto/fleche_index.png HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"228-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 246
Keep-Alive: timeout=15, max=91
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/css/img/btt/btn.gif | 185.136.42.43 | 200 OK | 457 B |
URL HTTP/1.1www.securitepro.fr/bnpp/css/img/btt/btn.gif IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeGIF image data, version 89a, 99 x 28\012- data Hash586f7bbfbc7e29541b9ae366bb2f4ca7 1a48f90024a26fbb8969bd07726228ebd8919bbf 90128ca34bafe9ad1039b7b4f474d85ad7c40487067e738d8cb7063ca6663eb2
GET /bnpp/css/img/btt/btn.gif HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"454-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/gif
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 457
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/css/img/login/bg.jpg | 185.136.42.43 | 200 OK | 3.1 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/css/img/login/bg.jpg IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 140x90, components 3\012- data Hash6a4eaaad67a5c4c67661c7f7b609a1ef 9e474261d5a7aa8c10b78913c5001eb4ccc03926 3a5710cdc2d0b9438cbf83798c7cab503866658f6b8af5f165f6f77861ccce2e
GET /bnpp/css/img/login/bg.jpg HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"4020-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/jpeg
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3115
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/extended_classes.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 | 185.136.42.43 | 200 OK | 678 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/extended_classes.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeASCII text, with very long lines (4187), with no line terminators Hash26a1b0d366563daee26cba475489093f 76b8d8921fea3fe270f8e6d94a7bd0d7739172b2 3009d2ce48df9ae3676dc4627c75f4272fc40cacd8d62f2b912ea1dac5ae3413
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/s/3_3_1.SP3org/richfaces/renderkit/html/css/extended_classes.xcss/DATB/eAF7sqpgb-jyGdIAFrMEaw__;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2 HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1, JSF/1.2
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: text/css;charset=ISO-8859-1
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 678
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
|
|
| www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org.richfaces.renderkit.html.iconimages.CalendarIcon/DATB/eAH7cW0fw6znAA8XBA4_ | 185.136.42.43 | 200 OK | 589 B |
URL HTTP/1.1www.securitepro.fr/bnpp/a4j/g/3_3_1.SP3org.richfaces.renderkit.html.iconimages.CalendarIcon/DATB/eAH7cW0fw6znAA8XBA4_ IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeGIF image data, version 89a, 20 x 20\012- data Hash80887fcd3f37d737238a8d2af31923e6 e07f45c59da381eef86d3fbb1ae1111300726fff 063a05850cbfce40af0e2af05f94b8ff431ae025f71b422e797ea1b3ee3c05aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /bnpp/a4j/g/3_3_1.SP3org.richfaces.renderkit.html.iconimages.CalendarIcon/DATB/eAH7cW0fw6znAA8XBA4_ HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Cache-control: max-age=86400
Last-Modified: Mon, 27 Jun 2022 18:17:15 GMT
Expires: Fri, 07 Oct 2022 20:18:29 GMT
Content-Type: image/gif
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/images/login/sous-titre.png | 185.136.42.43 | 200 OK | 25 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/images/login/sous-titre.png IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 447 x 78, 8-bit/color RGBA, non-interlaced\012- data Hash5edbaf8a68871cdedd8d23b464746d54 0238149bc32472b3ffabf2cc7129eeb6459ec186 a9d277e6d4f1df97a46b9e95e48ef770918f4bacd5758a9da020ab812f2d3427
GET /bnpp/images/login/sous-titre.png HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"24868-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=90
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/css/img/login/bloc-am-espace-abo.png | 185.136.42.43 | 200 OK | 42 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/css/img/login/bloc-am-espace-abo.png IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typePNG image data, 900 x 383, 8-bit/color RGBA, non-interlaced\012- data Hashfb37fe5d234abe53a2329760e88bb94b 2ae5407a73514345a47f0de92255f31e6cdf6ce8 3de4192bdd4402ccbd3bc61ecbb763cace5a1660441fae475b40b470e57fb0a3
GET /bnpp/css/img/login/bloc-am-espace-abo.png HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/css/style.css;jsessionid=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"43075-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/png
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/images/visu/1.jpg | 185.136.42.43 | 200 OK | 57 kB |
URL HTTP/1.1www.securitepro.fr/bnpp/images/visu/1.jpg IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeJPEG image data, JFIF standard 1.02, resolution (DPCM), density 200x200, segment length 16, comment: "HoS\003\", baseline, precision 8, 900x443, components 3\012- data Hashb72f4cf861e62992183dfa6b74ac4248 d95a4c0a60df6d675a5053d34ce733d3a3dc9d5e 4545ace026ae36e3dcb11cd992037bf576e0a497a3c32fa51a0c589561f8bc0c
GET /bnpp/images/visu/1.jpg HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"58059-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
Content-Type: image/jpeg
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| www.securitepro.fr/bnpp/images/favicon.ico | 185.136.42.43 | 200 OK | 713 B |
URL HTTP/1.1www.securitepro.fr/bnpp/images/favicon.ico IP185.136.42.43:0 ASN#197883 Serinya Telecom Sasu
File typeMS Windows icon resource - 2 icons, 16x16, 8 bits/pixel, 16x16, 16 colors, 4 bits/pixel\012- data Hash7d05efc2a35a21cc4a3ef04f0dfa2d28 101b619448867b622f9232b6b00df39e1f0b30e1 432ffbdda8ccd0a3c77172a37701f9db19bf0970d93d625ea775b5d7a0dfda55
GET /bnpp/images/favicon.ico HTTP/1.1
Host: www.securitepro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/bnpp/login/login.seam
Cookie: JSESSIONID=EBFEB14612C09C5EA67EB78B1DAEDEF8.PRDC2CLUST1-node2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 20:18:29 GMT
Server: Apache
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1
Accept-Ranges: bytes
ETag: W/"1718-1601118624000-gzip"
Last-Modified: Sat, 26 Sep 2020 11:10:24 GMT
X-Frame-Options: ALLOW-FROM www.securiteplus.net
Content-Type: image/vnd.microsoft.icon
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash5eee2baed68ec922370bd283860860fd 7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4 7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 20:18:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.securitepro.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 06 Oct 2022 18:41:09 GMT
expires: Thu, 06 Oct 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 5840
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&a=1555126504&t=pageview&_s=1&dl=https%3A%2F%2Fwww.securitepro.fr%2Fbnpp%2Flogin%2Flogin.seam&ul=en-us&de=windows-1252&dt=BNP%20Paribas%20s%C3%A9curit%C3%A9%20-%20Assistance&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=20818814&gjid=789681294&cid=1466885617.1665087510&tid=UA-40401831-35&_gid=1927088333.1665087510&_r=1&_slc=1&z=1009729213 | 142.250.74.174 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&a=1555126504&t=pageview&_s=1&dl=https%3A%2F%2Fwww.securitepro.fr%2Fbnpp%2Flogin%2Flogin.seam&ul=en-us&de=windows-1252&dt=BNP%20Paribas%20s%C3%A9curit%C3%A9%20-%20Assistance&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=20818814&gjid=789681294&cid=1466885617.1665087510&tid=UA-40401831-35&_gid=1927088333.1665087510&_r=1&_slc=1&z=1009729213 IP142.250.74.174:0
File typeASCII text, with no line terminators Hash38684612f0c6bb6dfa16da92f4a6878f 6fe62d0dd7db314b7f9bb945672f078e01d27f0f a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=1555126504&t=pageview&_s=1&dl=https%3A%2F%2Fwww.securitepro.fr%2Fbnpp%2Flogin%2Flogin.seam&ul=en-us&de=windows-1252&dt=BNP%20Paribas%20s%C3%A9curit%C3%A9%20-%20Assistance&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=20818814&gjid=789681294&cid=1466885617.1665087510&tid=UA-40401831-35&_gid=1927088333.1665087510&_r=1&_slc=1&z=1009729213 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.securitepro.fr
Connection: keep-alive
Referer: https://www.securitepro.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.securitepro.fr
date: Thu, 06 Oct 2022 20:18:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashf763a685d14b05b6ced9792151da30b8 b25be5359245be857ffa1bddcb197cb771a36a45 505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 20:18:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 34.216.192.228 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.216.192.228:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8mykNL0DuLBUsLhfRE3o+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hzUJ7N6aQPhoeKooXHzP0/XSTb0=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe825fc3ba1ec6c169fbc10ffef8dffb0 6bf9cffa8468b37068aebed5a43dbc911086fc84 b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11623
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:18:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe825fc3ba1ec6c169fbc10ffef8dffb0 6bf9cffa8468b37068aebed5a43dbc911086fc84 b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11623
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:18:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe825fc3ba1ec6c169fbc10ffef8dffb0 6bf9cffa8468b37068aebed5a43dbc911086fc84 b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11623
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:18:31 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe238ccaa3b9fa88476a8514855e8232f 447cbf348ef10d0136a1811e843c46937defbba1 43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7270
x-amzn-requestid: f2f15f43-6054-40f5-943a-530671e772dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZjF3aIAMFW9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-5e2253791a927c8c40a0ff0d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: xRuMce_9OkP3R2DqHjZI34GwkDezdfGKsgntCMTZG2c6SJUcyv0Ckg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:56:40 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
content-type: image/jpeg
age: 80511
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg | 34.120.237.76 | 200 OK | 4.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdbba56f647bf5989ca51863632bbebfc 26694f34166345ee5693653e0101db6b910e68ba ec5cc38f2a77e8e655aeeb7a376cf882ccb7163e4ef9d1ce4633ab4754e48765
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4140
x-amzn-requestid: 13fcd792-1fcc-44b5-aa9e-d2773a60fe77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uHrbIAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-5b5f5d781b9d651b68c04f2e;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: wfnbRpTKni8hbAmJXO9vdisV6ZPoRP-eBb3wP4RzPS7MlXvp7282dw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 6a63e853422f3197776fb098fab5a416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:36:41 GMT
age: 81710
etag: "26694f34166345ee5693653e0101db6b910e68ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg | 34.120.237.76 | 200 OK | 3.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash488ec5b4267ccb1cdc4e6e08556f7f3b 42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88 d9b05fe92962a58b9a8e8dbd4757969aa361be12018107ae649ffcdb8a0f8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3430
x-amzn-requestid: 9b3b52d6-08b4-4893-962b-3dfe67e2f11d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjTijF0vIAMFq3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dffa9-0a128734418b6c4d6375e2ac;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 22:05:29 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: iRuujAZLL_0mf5_-FhMXpuWwHy-jidhBkFuBIZLo0tLlJArZgFEcbA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 45d6a557ecb29942f314e3dd736d817a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 16:10:55 GMT
age: 14856
etag: "42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp | 34.120.237.76 | 200 OK | 9.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash70ea26af79226e9ff06d6198e2c019dc ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57 f9393e7b8cbaedc8e1ef87fd89c617cf102f58813d84d866ff68e3124f94d44c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9044
x-amzn-requestid: 127bce04-9f75-4bb1-bbe7-33bf1694d96c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmHG5oAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-3896085b3b73ff5403237206;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E4yZTPRLFdK717YfwjOIFOJDi0wYpyA736dQELeM5iPLvGDXBosEWg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 04:27:43 GMT
age: 57048
etag: "ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2277f8f2d93b4bc3b05d348343177892 531d9e4ec9078cd2d7376a19fcb287084af36c82 62907648de4a2ed390232a71ab7dce49f1e9c3363cde6a2f30ecae10ab67f93a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11080
x-amzn-requestid: 8fa4d19d-87a5-46c5-96c5-4aec793daad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO7xE5eoAMFQLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84b-5c422c7a168c014f57559037;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: TlEKsCdhNhlKmA2Yhz8FarEUG18gQZMKGRD6SnzCnUMiKyGS9-UeOQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:38:04 GMT
etag: "531d9e4ec9078cd2d7376a19fcb287084af36c82"
content-type: image/jpeg
age: 81627
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9e520f87cae411cfc2ed1c8a14184385 69ad212cb7ae309d4f02019552887135bfae67da 723b10bfbcde201b5811e3bd0560f02f90775e4d18b28d19e6c814899f2da71a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7511
x-amzn-requestid: 995b51dd-5484-4b4c-ad40-550f7fd85930
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uG70IAMFjBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-70f17f6f24dce0003d03902a;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 3lKuGlFCBN2wEsp9-Oa3ysQg62py090H30jy6_bR02Ufs0KGPrVC4w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:36:41 GMT
age: 81710
etag: "69ad212cb7ae309d4f02019552887135bfae67da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|