Report - isl-online.fr

Report Overview

URL

isl-online.fr
IP

199.34.228.56

ASN

#27647 WEEBLY
Submitted

2023-03-06T13:09:09Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

6

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com (1)	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	383	71360	172.217.21.168
ocsp.digicert.com (1)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341	547	192.229.221.95
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3260	48389	34.120.237.76
snap.licdn.com (1)	1044	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	383	5116	23.36.76.121
ocsp.r2m02.amazontrust.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350	969	143.204.48.16
widget.privy.com (1)	22850	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	370	595	104.22.20.108
r3.o.lencr.org (8)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2704	7092	23.36.76.226
isl-online.fr (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	345	477	199.34.228.56
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	391	34.117.237.239
www.isl-online.fr (16)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9020	220787	199.34.228.56
ocsp.pki.goog (5)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1715	3499	216.58.211.3
www.linkedin.com (1)	608	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	576	2746	13.107.42.14
vts.zohopublic.com (1)	17545	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	861	172	136.143.191.144
cdn2.editmysite.com (11)	11564	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4481	284177	151.101.193.46
fonts.gstatic.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1037	39686	216.58.207.227
pagesense-collect.zoho.com (4)	35270	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4964	2016	136.143.191.190
cdn.linkedin.oribi.io (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	429	427	143.204.55.71
new-collect.albacross.com (1)	53310	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	775	154	46.51.174.6
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5894	34.160.144.191
salesiq.zoho.com (2)	15939	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1045	46661	136.143.191.67
ocsp.r2m01.amazontrust.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	700	2012	143.204.48.16
fonts.googleapis.com (1)	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	880	630	142.250.74.74
cdn.pagesense.io (2)	32052	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	928	1070	54.230.111.98
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2372	35.241.9.150
in-automate.sendinblue.com (2)	28489	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1202	1060	104.16.255.96
js.zohocdn.com (4)	14060	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1675	373444	185.20.209.147
static.zohocdn.com (2)	25981	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	825	57669	185.20.209.147
sibautomation.com (2)	26949	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	901	851	104.18.30.104
serve.albacross.com (1)	64177	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	365	4474	143.204.55.5
app.leadberry.com (2)	374043	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	874	2352	104.26.1.13
ocsp.sectigo.com (4)	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1360	3854	104.18.32.68
ec.editmysite.com (2)	12806	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1011	743	44.229.8.112
px.ads.linkedin.com (2)	522	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	956	2107	13.107.42.14
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	52.10.247.29
region1.google-analytics.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	709	448	216.239.34.36
css.zohocdn.com (4)	15316	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1846	77018	185.20.209.147
api.privy.com (1)	13778	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	528	848	172.67.36.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-06	medium	isl-online.fr/	Phishing
2023-03-06	medium	www.isl-online.fr/	Phishing
2023-03-06	medium	www.isl-online.fr/	Phishing
2023-03-06	medium	www.isl-online.fr/files/theme/plugins.js?1591095656	Phishing
2023-03-06	medium	www.isl-online.fr/files/theme/custom.js?1591095656	Phishing
2023-03-06	medium	www.isl-online.fr/uploads/8/8/0/1/8801059/pr%C3%A9sentation_isl_online_756.mp4	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (101)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

edf4102b9efce8261382541ecd721da5

23a30610ea113c9f93b0ce302ce3df010bd56f05

88c132ab9697f01e979e74208e0ae12ec410c26b7a79f0cead4f9c8f86d12fda

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88C132AB9697F01E979E74208E0AE12EC410C26B7A79F0CEAD4F9C8F86D12FDA"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2804
Expires: Mon, 06 Mar 2023 13:55:41 GMT
Date: Mon, 06 Mar 2023 13:08:57 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

cf14baed0842431a08367ed54f2346ca

d943be8835b7e4470e3d6fbe09ac39c5464be434

a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11065
Expires: Mon, 06 Mar 2023 16:13:22 GMT
Date: Mon, 06 Mar 2023 13:08:57 GMT
Connection: keep-alive

isl-online.fr/

199.34.228.56

301 Moved Permanently

233

URL HTTP/1.1

isl-online.fr/
IP

199.34.228.56:0
ASN

#27647 WEEBLY

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

233
Hash

634fb4bb984f14d5b607d5990aa8e43f

10a2d68e8d7965163a297725f2860120e23e287f

9022510c5f967b68d4407d2242f34a8ca7d47aaeee3f188641eb374f040aa27a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: isl-online.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Date: Mon, 06 Mar 2023 13:08:57 GMT
Server: Apache
Location: http://www.isl-online.fr/
Content-Length: 233
Keep-Alive: timeout=10, max=65
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

7f03faaba3392caae6dae54467bfdf6d

57ea1f14e8bfbcca8190c706d708c9fda12442c1

02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Retry-After, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Mar 2023 13:08:35 GMT
content-type: application/json
age: 22
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

5034bcceb9691ad6244be6045742ab53

51e77cdc92833432cd26b13f28875791a187c63c

540637d0d69c1201dcb2dd813b40e64cd07c5bd7685d46a7bad4d437a4e7aeea

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "540637D0D69C1201DCB2DD813B40E64CD07C5BD7685D46A7BAD4D437A4E7AEEA"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11074
Expires: Mon, 06 Mar 2023 16:13:31 GMT
Date: Mon, 06 Mar 2023 13:08:57 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

b5ba6334e73496995e3e3a9ecd0eb323

ad80d3b7718c28364e8c2004fb38a13a1747e462

aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: +WwIwMGlLDJxGEA8CeGazGjyE8nOveuAETUvT9Oze+iqJuyiWmHQn8DCcWIdA8dT/8F+avThFglr0RCh6gJNgQ==
x-amz-request-id: 1Y0W4YWT9H62VDBQ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Mar 2023 12:34:49 GMT
age: 2048
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 13:08:57 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.isl-online.fr/

199.34.228.56

301 Moved Permanently

350

URL HTTP/1.1

www.isl-online.fr/
IP

199.34.228.56:0
ASN

#27647 WEEBLY

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

350
Hash

09014fc92df24bcf83d180df671a7644

486f75263a7789afb3cf8366850d896e55c51381

f9ea1e07356be613c3f9038f115a60e3ac2882bcd960c8ea8dc3783b2ec2b853

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: www.isl-online.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Date: Mon, 06 Mar 2023 13:08:57 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.isl-online.fr
Vary: X-W-SSL,User-Agent
Location: https://www.isl-online.fr/
X-Host: grn95.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 350
Keep-Alive: timeout=10, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Cache-Control, Expires, Alert, Content-Type, Pragma, Retry-After, Last-Modified, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Mar 2023 12:12:30 GMT
age: 3387
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

e44d064b81b73efe46cc420f8ae34410

229b99f9754fdce4f543513a0942ba63f67dc057

69b84b87493304be0456180f60ddf01f51a96fffa86fe8dddc8dd920fb262f06

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "69B84B87493304BE0456180F60DDF01F51A96FFFA86FE8DDDC8DD920FB262F06"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11084
Expires: Mon, 06 Mar 2023 16:13:42 GMT
Date: Mon, 06 Mar 2023 13:08:58 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

028e837f371fcea352146eb45199a957

a74bff10d2fcbe015078df0f7f1ad864de559bcc

7734d54b2842f92d3c7bb1ff85aa5e78a4a113d8326a4f5732dbfd4efba42613

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7734D54B2842F92D3C7BB1FF85AA5E78A4A113D8326A4F5732DBFD4EFBA42613"
Last-Modified: Mon, 06 Mar 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 06 Mar 2023 19:08:58 GMT
Date: Mon, 06 Mar 2023 13:08:58 GMT
Connection: keep-alive

push.services.mozilla.com/

52.10.247.29

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

52.10.247.29:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3Vo5bYwV7b8/YVS99gfwcw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e2x0bXXN8SNtX6pCTwmpqiItHZI=

www.isl-online.fr/

199.34.228.56

200 OK

20913

URL HTTP/1.1

www.isl-online.fr/
IP

199.34.228.56:0
ASN

#27647 WEEBLY

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11469), with CRLF, LF line terminators

Size

20913
Hash

59eca64585ce948457a90b96803bbbf8

baa45c85e30a6da0879aa5d9cd3558bce1073d0e

760a4f36ae244504facc2d176d2829193fe01b6d44723e74376e4067629d42c9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: www.isl-online.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 13:08:58 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.isl-online.fr
language=en; expires=Mon, 20-Mar-2023 13:08:58 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"2a32a1db9c892e8dcacb869b6fd03fd9-gzip"
Content-Encoding: gzip
X-Host: blu7.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 20913
Keep-Alive: timeout=10, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

cdn2.editmysite.com/css/sites.css?buildTime=1677273206

151.101.193.46

200 OK

29746

URL HTTP/2

cdn2.editmysite.com/css/sites.css?buildTime=1677273206
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

29746
Hash

d10158b22b553f723d99dc78eaee6390

80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6

939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e

HTTP Headers

                                        GET /css/sites.css?buildTime=1677273206 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 24 Feb 2023 20:51:56 GMT
etag: W/"63f9236c-347ac"
expires: Fri, 10 Mar 2023 21:19:06 GMT
cache-control: max-age=1209600
x-host: blu63.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834592
x-served-by: cache-sjc10045-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 1409, 23
x-timer: S1678108139.729319,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1677273206

151.101.193.46

200 OK

13265

URL HTTP/2

cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1677273206
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (32013)

Size

13265
Hash

da04d4da36c827437eb064334cf40561

b54b259c2dce4a00e265deddf2ee0941dda6ed40

0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a

HTTP Headers

                                        GET /js/old/slideshow-jq.js?buildTime=1677273206 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 24 Feb 2023 20:52:21 GMT
etag: "63f92385-9e0b"
expires: Fri, 10 Mar 2023 21:19:06 GMT
cache-control: max-age=1209600
x-host: blu144.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834592
x-served-by: cache-sjc10045-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 35, 5
x-timer: S1678108139.729952,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13265
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/jquery-1.8.3.min.js

151.101.193.46

200 OK

33467

URL HTTP/2

cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (65483)

Size

33467
Hash

67a5a77f65f13559b3d723829f2e0108

5e861ec7c2993abffc3591d6132c47bc7cdc3e98

ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6

HTTP Headers

                                        GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 20:40:11 GMT
etag: "63f52c2b-16dc4"
expires: Tue, 07 Mar 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: blu34.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 1087243
x-served-by: cache-sjc10032-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 56, 8317
x-timer: S1678108139.729583,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2

cdn2.editmysite.com/css/old/fancybox.css?1677273206

151.101.193.46

200 OK

1218

URL HTTP/2

cdn2.editmysite.com/css/old/fancybox.css?1677273206
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (3910)

Size

1218
Hash

b644e92258f4c7c0b4270047652d1e60

93734d52ee9e86a768159e514076051813c39cd9

29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907

HTTP Headers

                                        GET /css/old/fancybox.css?1677273206 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 24 Feb 2023 20:52:02 GMT
etag: "63f92372-f47"
expires: Fri, 10 Mar 2023 21:19:07 GMT
cache-control: max-age=1209600
x-host: grn107.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834592
x-served-by: cache-sjc10026-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 70, 24
x-timer: S1678108139.740771,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/lang/fr_CA/stl.js?buildTime=1677273206&

151.101.193.46

200 OK

36242

URL HTTP/2

cdn2.editmysite.com/js/lang/fr_CA/stl.js?buildTime=1677273206&
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

Unicode text, UTF-8 text, with very long lines (64436)

Size

36242
Hash

6ed4690a37abd03c594a57a0deb1f4ef

2047120e1dd41279abccaa490a28a9befeaad217

326be4dc5edf5c35a4148cc90855bbad230246c2d8208be74ca270f2e86f0d89

HTTP Headers

                                        GET /js/lang/fr_CA/stl.js?buildTime=1677273206& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 24 Feb 2023 20:51:00 GMT
etag: "63f92334-2ef1f"
expires: Fri, 10 Mar 2023 21:19:14 GMT
cache-control: max-age=1209600
x-host: grn107.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834584
x-served-by: cache-sjc10022-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 69, 1
x-timer: S1678108139.729579,VS0,VE3
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 36242
X-Firefox-Spdy: h2

cdn2.editmysite.com/css/old/slideshow/slideshow.css?1677273206

151.101.193.46

200 OK

1488

URL HTTP/2

cdn2.editmysite.com/css/old/slideshow/slideshow.css?1677273206
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (7352)

Size

1488
Hash

ba9bbd4df86b5b255f5ef44658e52130

3970cecb6939475f95556c2d32d17de0d1645f32

244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5

HTTP Headers

                                        GET /css/old/slideshow/slideshow.css?1677273206 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 24 Feb 2023 20:52:15 GMT
etag: W/"63f9237f-1cb9"
expires: Fri, 10 Mar 2023 21:19:06 GMT
cache-control: max-age=1209600
x-host: grn148.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834592
x-served-by: cache-sjc10063-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 44, 4
x-timer: S1678108139.741062,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1488
X-Firefox-Spdy: h2

cdn2.editmysite.com/css/social-icons.css?buildtime=1677273206

151.101.193.46

200 OK

1640

URL HTTP/2

cdn2.editmysite.com/css/social-icons.css?buildtime=1677273206
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (13080)

Size

1640
Hash

ed1dd7365f6d8f1f1fee5adcae599688

eda202614f68a3ff375a9edca466e5628559fa7d

4d043dcff623c5cb6dcf3a3d1747b62dcb2688c06539dfea83f8777af0b123dd

HTTP Headers

                                        GET /css/social-icons.css?buildtime=1677273206 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 24 Feb 2023 20:51:56 GMT
etag: W/"63f9236c-3319"
expires: Fri, 10 Mar 2023 21:19:07 GMT
cache-control: max-age=1209600
x-host: grn147.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834591
x-served-by: cache-sjc10051-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 53, 17
x-timer: S1678108139.741080,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1640
X-Firefox-Spdy: h2

cdn2.editmysite.com/fonts/Open_Sans/font.css?2

151.101.193.46

200 OK

367

URL HTTP/2

cdn2.editmysite.com/fonts/Open_Sans/font.css?2
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text

Size

367
Hash

52e94ffb1c814650bab35433c3034ac7

b42d636ac9b71805f751612208ddb34e93a6538d

fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462

HTTP Headers

                                        GET /fonts/Open_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:35:42 GMT
etag: "63f8cb3e-a2a"
expires: Mon, 13 Mar 2023 12:08:40 GMT
cache-control: max-age=1209600
x-host: blu114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 608418
x-served-by: cache-sjc10081-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 7, 2377
x-timer: S1678108139.741536,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 367
X-Firefox-Spdy: h2

cdn2.editmysite.com/fonts/Raleway/font.css?2

151.101.193.46

200 OK

360

URL HTTP/2

cdn2.editmysite.com/fonts/Raleway/font.css?2
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text

Size

360
Hash

b92addf54672827faa7cc50d55a699a3

ff85b06e2c6f390b6ea783ec718e4fe985430847

086c4ff009ef8815a185dacfe8c8d394e3e6cbc6128a8ad950392f7a872d7160

HTTP Headers

                                        GET /fonts/Raleway/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 27 Feb 2023 14:09:38 GMT
etag: "63fcb9a2-a10"
expires: Tue, 14 Mar 2023 08:41:35 GMT
cache-control: max-age=1209600
x-host: grn85.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 534443
x-served-by: cache-sjc10033-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 15, 81
x-timer: S1678108139.741515,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 360
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1677273206

151.101.193.46

200 OK

159030

URL HTTP/2

cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1677273206
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (32007)

Size

159030
Hash

40bd6b3520e6770db22d841b9009be3f

5d863c1e1b29700dc2f3546228e0e195ec235587

4157f51e5e61cce428bcbcbea0ec28c41bdc836531ca17333855b7c2a24919a8

HTTP Headers

                                        GET /js/site/main-customer-accounts-site.js?buildTime=1677273206 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 24 Feb 2023 20:52:21 GMT
etag: "63f92385-825b0"
expires: Fri, 10 Mar 2023 21:19:06 GMT
cache-control: max-age=1209600
x-host: grn138.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 06 Mar 2023 13:08:58 GMT
age: 834591
x-served-by: cache-sjc10043-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
x-cache-hits: 58, 1
x-timer: S1678108139.729278,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159030
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

70b7bd4f159732db2d96e0d06e721a13

ea416c05c031417da1ddecb4da35dfac8bf5cbc7

9c2e5acfe6bbd5d12087e28cb3a6b88a28f9d35b67eb4bc54e3a88fb46965379

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:08:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.isl-online.fr/files/main_style.css?1677519511

199.34.228.56

200 OK

6200

URL HTTP/1.1

www.isl-online.fr/files/main_style.css?1677519511
IP

199.34.228.56:0
ASN

#27647 WEEBLY

Magic

ASCII text, with very long lines (575)

Size

6200
Hash

65ace59a2e4feff314bbca47238cd560

c352ec949d7e983f2a75d70060b80594beae9cae

70a20c15a795d49a9ee8e572902bbb63692567174a86f61ab0c2dfdee2ec2bca

HTTP Headers

                                        GET /files/main_style.css?1677519511 HTTP/1.1
Host: www.isl-online.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 13:08:58 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn32.sf2p.intern.weebly.net
Content-Encoding: gzip

www.googletagmanager.com/gtm.js?id=GTM-TNHS6DV

172.217.21.168

200 OK

70713

URL HTTP/2

www.googletagmanager.com/gtm.js?id=GTM-TNHS6DV
IP

172.217.21.168:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (4338)

Size

70713
Hash

5660a65d159c0347811f8eacade3b44d

b20587c617f3da2f243e3f4fc5b7dd6aeed8763f

119316f76c2ba851a436395ce51a4b6932e8030862ec9eeba3afbbfc1347b61b

HTTP Headers

                                        GET /gtm.js?id=GTM-TNHS6DV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Mar 2023 13:08:58 GMT
expires: Mon, 06 Mar 2023 13:08:58 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70713
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

70b7bd4f159732db2d96e0d06e721a13

ea416c05c031417da1ddecb4da35dfac8bf5cbc7

9c2e5acfe6bbd5d12087e28cb3a6b88a28f9d35b67eb4bc54e3a88fb46965379

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:08:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

fed02b60cdde629ed9682f466ed27c05

ca8a522c9deb45527119e5d243ddb316a0e22a44

0d653eca33ea40a8bcaf632dd27528d1ff4f3dfeb6497952edd530241f1cf69e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:08:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.isl-online.fr/files/theme/plugins.js?1591095656

199.34.228.56

200 OK

15721

URL HTTP/1.1

www.isl-online.fr/files/theme/plugins.js?1591095656
IP

199.34.228.56:0
ASN

#27647 WEEBLY

Magic

ASCII text

Size

15721
Hash

ce37502e9066932ae36507eff2c95a51

eac31d39f374a2a7512208477c9feabe185ab167

b23632e7cfb2ae59a9e8e6dd4427071bbb2d316ef562bf8cd8bedace4201c541

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /files/theme/plugins.js?1591095656 HTTP/1.1
Host: www.isl-online.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 13:08:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 05 May 2022 18:26:31 GMT
x-rgw-object-type: Normal
ETag: W/"64497d2ab794cdb5e3c5c86cf7c5a611"
x-amz-request-id: tx000000000000001b49eab-0062848178-b9fbc77-sfo1
X-Storage-Bucket: z637b
X-Storage-Object: 637b5d2a661d0201f239a7afcd1278bf55bec7ef7ada6cc6c0485c4e45d9b702
X-Host: grn27.sf2p.intern.weebly.net
Content-Encoding: gzip

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

0b2a6c80075ac612fdd0c0db8ecc7508

816bcd2a7acf9dbf93e52adbe3549a2945d4cbfb

f5b916b912ad2c776304ec956a0d8c6e383551ae5f4c9c15bdf82b2db499d02b

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:08:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.227

200 OK

16740

URL HTTP/2

fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP

216.58.207.227:0
ASN

#15169 GOOGLE

Magic

Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data

Size

16740
Hash

e43b535855a4ae53bd5b07a6eeb3bf67

6507312d9491156036316484bf8dc41e8b52ddd9

b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

HTTP Headers

                                        GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.isl-online.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Mar 2023 21:12:36 GMT
expires: Fri, 01 Mar 2024 21:12:36 GMT
cache-control: public, max-age=31536000
age: 316583
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2

216.58.207.227

200 OK

21280

URL HTTP/2

fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2
IP

216.58.207.227:0
ASN

#15169 GOOGLE

Magic

Web Open Font Format (Version 2), TrueType, length 21280, version 1.0\012- data

Size

21280
Hash

16911581ab7ea10687a5aee74cbc5612

b0b24248345739209d753a4ac77ccfc1f627b219

c78a1da5fd0868a547cf285748c7fb73006571190385eb71c0d601b6b240ffaf

HTTP Headers

                                        GET /s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.isl-online.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Mar 2023 00:56:39 GMT
expires: Fri, 01 Mar 2024 00:56:39 GMT
cache-control: public, max-age=31536000
age: 389540
last-modified: Mon, 18 Jul 2022 19:57:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

0b2a6c80075ac612fdd0c0db8ecc7508

816bcd2a7acf9dbf93e52adbe3549a2945d4cbfb

f5b916b912ad2c776304ec956a0d8c6e383551ae5f4c9c15bdf82b2db499d02b

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:08:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.isl-online.fr/uploads/8/8/0/1/8801059/isl-online-logo.jpg

199.34.228.56

200 OK

1955

URL HTTP/1.1

www.isl-online.fr/uploads/8/8/0/1/8801059/isl-online-logo.jpg
IP

199.34.228.56:0
ASN

#27647 WEEBLY

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 159x61, components 3\012- data

Size

1955
Hash

68032147f72a5e1482ed5495dd2d88aa

5f19580d3cef184ddd2805661bb1ce700b7a69ec

07d6166881675497ee3df5a4aa5370c4e0dc7b7409d9a5415c32261609013ca4

HTTP Headers

                                        GET /uploads/8/8/0/1/8801059/isl-online-logo.jpg HTTP/1.1
Host: www.isl-online.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 13:08:59 GMT
Content-Type: image/jpeg
Content-Length: 1955
Connection: keep-alive
Last-Modified: Tue, 02 Jun 2020 10:57:38 GMT
x-rgw-object-type: Normal
ETag: "68032147f72a5e1482ed5495dd2d88aa"
x-amz-request-id: tx000000000000046cb802a-006396fbb3-c699baa-sfo1
X-Storage-Bucket: z07d6
X-Storage-Object: 07d6166881675497ee3df5a4aa5370c4e0dc7b7409d9a5415c32261609013ca4
X-Host: blu81.sf2p.intern.weebly.net
Accept-Ranges: bytes

serve.albacross.com/track.js

143.204.55.5

200 OK

3943

URL HTTP/1.1

serve.albacross.com/track.js
IP

143.204.55.5:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with very long lines (10031)

Size

3943
Hash

9b9c787ca67251fd4fe30c54db3f1a34

ed6f8cbf960c4464f57582c44e05999421592c12

6031abc9c12bb412388890db589d36339861fb2bee1102a0037983005737bc0d

HTTP Headers

                                        GET /track.js HTTP/1.1
Host: serve.albacross.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.isl-online.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 15 Dec 2022 09:39:19 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 06 Mar 2023 13:08:59 GMT
Cache-Control: max-age=120
ETag: W/"677b062b7ee7382b7082b87bab179b14"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YIfA8JRWjfM9Nbkpt8L8aLyj5TAZw6Dh3xXS4zad5fMk2P5Okb7rKw==
Age: 3

www.isl-online.fr/files/theme/custom.js?1591095656

199.34.228.56

200 OK

1635

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (52)

#1 JS:Script (size: 117)

#2 JS:Script (size: 22)

#3 JS:Script (size: 54)

#4 JS:Script (size: 8592)

#5 JS:Script (size: 613)

#6 JS:Script (size: 664)

#7 JS:Script (size: 65)

#8 JS:Script (size: 341)

#9 JS:Script (size: 13352)

#10 JS:Script (size: 59265)

#11 JS:Script (size: 75006)

#12 JS:Script (size: 23)

#13 JS:Script (size: 10032)

#14 JS:Script (size: 2253)

#15 JS:Script (size: 1261069)

#16 JS:Script (size: 15061)

#17 JS:Script (size: 53)

#18 JS:Script (size: 35)

#19 JS:Script (size: 192287)

#20 JS:Script (size: 7891)

#21 JS:Script (size: 288)

#22 JS:Script (size: 225370)

#23 JS:Script (size: 5644)

#24 JS:Script (size: 22484)

#25 JS:Script (size: 222276)

#26 JS:Script (size: 7949)

#27 JS:Script (size: 1157)

#28 JS:Script (size: 46274)

#29 JS:Script (size: 24115)

#30 JS:Script (size: 2246)

#31 JS:Script (size: 264)

#32 JS:Script (size: 9337)

#33 JS:Script (size: 2345)

#34 JS:Script (size: 40459)

#35 JS:Script (size: 0)

#36 JS:Script (size: 364)

#37 JS:Script (size: 62)

#38 JS:Script (size: 329575)

#39 JS:Script (size: 192732)

#40 JS:Script (size: 1756)

#41 JS:Script (size: 32)

#42 JS:Script (size: 16730)

#43 JS:Script (size: 93636)

#44 JS:Script (size: 67464)

#45 JS:Script (size: 647)

#46 JS:Script (size: 16558)

#47 JS:Script (size: 827)

#48 JS:Script (size: 120211)

#49 JS:Script (size: 37281)

#50 JS:Script (size: 121568)

#51 JS:Script (size: 62)

#1 JS:Write (size: 598)

HTTP Transactions (101)

URL HTTP/1.1

IP

ASN