Report - beluxrepm.followme.fr/FolloWMe/login.php

Report Overview

Submitted URL
beluxrepm.followme.fr/FolloWMe/login.php
IP
46.105.38.139
ASN
#16276 OVH SAS
Submitted
2024-04-26 07:37:04
Access
public
Website Title
Followme
Final URL
beluxrepm.followme.fr/FolloWMe/login.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
118

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
beluxrepm.followme.fr	unknown	2013-09-20	2022-01-20	2024-03-28	37 kB	643 kB	46.105.38.139

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-27	medium	beluxrepm.followme.fr/FolloWMe/login.php	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas
2024-04-04	medium	beluxrepm.followme.fr/	BNP Paribas

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	beluxrepm.followme.fr/FolloWMe/login.php	325 B	2024-04-26	2024-04-26
Pretty URL beluxrepm.followme.fr/FolloWMe/login.php IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 09:37:05 Last Seen2024-04-26 09:37:05 Times Seen1 Hash b408521eafa7808c2e7f34622d4f6a75 866000a6590e20cbdaa33db21c9fe4e591a23053 c0439ea6b9f2aaea5b9e647272b8d5bd9d9154f452faa7f1e554e925a7e678ac Loading...

	beluxrepm.followme.fr/FolloWMe/translations/translations_catalog_en.js?v=202404	214 kB	2024-04-26	2024-05-03
Pretty URL beluxrepm.followme.fr/FolloWMe/translations/translations_catalog_en.js?v=202404 IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 09:37:05 Last Seen2024-05-03 11:28:29 Times Seen4 Hash 18a295695b9547e18a375fd7fc15ad2f 6be65ada1f11f58b613ced1640db83d0a7494805 d94948bb740eda7155d2f0c612b571100e82c4ac2efc59eeeb08543eac1de7cd Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/ajax.js?v=20240426093637	4.6 kB	2024-04-05	2024-05-03
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/ajax.js?v=20240426093637 IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 04:07:46 Last Seen2024-05-03 11:28:30 Times Seen10 Hash 79b6b68179f0716844f03d9f57937df1 b5de53841aafffb78fb448c348c7b38ee2b007fe 93ce73d6d742aeb34c53520e8c2b57d63864314d1dc137930fb25c541984dba4 Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/login.js?v=20240426093637	2.7 kB	2024-03-27	2024-05-03
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/login.js?v=20240426093637 IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 07:21:46 Last Seen2024-05-03 11:28:30 Times Seen16 Hash 16a7fcb0a138606da11de4faa9e44ef0 d97ed16a9e8349c5fd3ee80476662c9e63736537 721873313a21e5e7bd89388d22f1c6e6da784f506dc074699932ea3be37fb110 Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/crypto-js.js	192 kB	2023-03-07	2024-05-03
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/crypto-js.js IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 17:06:05 Last Seen2024-05-03 11:28:30 Times Seen604 Hash 60ab5dbd46dfa34dfef3c1548a22a978 3dd73b6f13dc818a3a9c5c7424c1c4a9649b00a2 c6826494432163d74fd27e78ad011a13d55e4670441cd49fc9f1e52a4afd28d9 Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/Encryption.js	4.4 kB	2023-05-15	2024-05-03
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/Encryption.js IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-15 09:51:35 Last Seen2024-05-03 11:28:30 Times Seen22 Hash ac117becbf43a224a7416f33d481e11b 991cd07c6777f6cdca44d3b04cdd458b06f55fe3 c607076e231d7c3e85a2c27c591c8f404bddcaa78cefc4b4bef8b1edc3a7b199 Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery-ui.min.js	255 kB	2023-03-07	2024-05-05
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery-ui.min.js IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:39:57 Last Seen2024-05-05 18:34:41 Times Seen3799 Hash 1e2047978946a1d271356d0b557a84a3 5f29a324c8affb1fdb26ad4564b1e044372beed2 9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/bootstrap.min.js	36 kB	2023-03-07	2024-05-06
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/bootstrap.min.js IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17:47 Last Seen2024-05-06 00:41:26 Times Seen477 Hash b6d6c550cb657155feb06fdcd34b73cb 27947c0c0fa837da9bdfdfc36f649c25f54bd1c0 267a83092a5fd6ec5fb746bce12d440abd37f1d649c072f653e17d0c800eb647 Loading...

	beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery.min.js	93 kB	2023-03-07	2024-05-07
Pretty URL beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery.min.js IP 46.105.38.139 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-05-07 00:47:25 Times Seen23837 Hash 397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4 Loading...

		Size	First Seen	Last Seen
	#1 Write - 467ae2b62a370b453f4082b6c3138a40	107 B	2024-04-26	2024-04-26
Pretty Observations First Seen2024-04-26 09:37:06 Last Seen2024-04-26 09:37:06 Times Seen1 Hash 467ae2b62a370b453f4082b6c3138a40 69749a9ea202681f6aca4fb3369d8af03ff31ce4 620a63c0d68f62e52b33a25036b3272a50b255f250dcf8e160a06eae5f5b1891 Loading...

HTTP Transactions (68)

URL IP Response Size

beluxrepm.followme.fr/FolloWMe/login.php

46.105.38.139

200 OK

3.0 kB

URL User Request GET HTTP/2
beluxrepm.followme.fr/FolloWMe/login.php
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
HTML document, ASCII text
Size
3.0 kB (3048 bytes)
Hash
fb62888c79662fb855c05ba4ab03190a
42fdfa2ed5284cc8a3a5be732ee0249da16f8256
05eefb4cfcb7796684206d752d6cb42699b1fc8179f91cc671682ee201b39001

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/login.php HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:37 GMT
server: Apache
content-security-policy: default-src 'self';connect-src 'self' http: ws: ;script-src 'nonce-eO8rYp8aGPvvTinSVH/8VWxEKzE=' 'strict-dynamic' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com;media-src 'self' blob: https: data: ;img-src 'self' blob: https: data: ;
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3048
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc; path=/; secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/websocket/websocket.css

46.105.38.139

200 OK

550 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/websocket/websocket.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Unicode text, UTF-8 text
Size
550 B (550 bytes)
Hash
8627e940077038620af7acff8e2354c2
c8e8fb0a5a1c560f1fe6d58a2785a0185b6e61a0
819812aaf2f38c0a1006ebce541ae40ab38cb1e1cd2c37b4e6ac43e6aad334f5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/websocket/websocket.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 550
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/font-awesome-animation.min.css

46.105.38.139

200 OK

2.0 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/font-awesome-animation.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (18317)
Size
2.0 kB (1956 bytes)
Hash
d8d291d24ed487350884f3ab9934a67d
96dcdcfb663707fbf12f25fc4ca5b6dae63955e3
d91fbb29e50b4c132324173efa14e46fc7290e79d1c5d6c8f58183645397d653

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/font-awesome-animation.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1956
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/font-awesome.min.css

46.105.38.139

200 OK

6.9 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/font-awesome.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (30837)
Size
6.9 kB (6930 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/font-awesome.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6930
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/dist/css/skins/skin-fm1.css?v=202404

46.105.38.139

200 OK

1.3 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/dist/css/skins/skin-fm1.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.3 kB (1271 bytes)
Hash
a62c3819011d05ce30cbd37257a723d7
c23071d9ffaa7a13684a8a2603e5ee55d5187cd8
d9f76561a70f468aa7cfd58828c4192cab650407ef31e75fbc01501ad38ab901

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/dist/css/skins/skin-fm1.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1271
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/define_events.css?v=202404

46.105.38.139

200 OK

2.9 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/define_events.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with CRLF line terminators
Size
2.9 kB (2910 bytes)
Hash
0fa2a0dfda688e7c701f0412d4cdea66
347fc3cdbd176cd025b598011c33f16c093bff0a
9971525f2895d6a7f76945346b440162e512972955eb20f1a2318f146269ef16

HTTP Headers

GET /FolloWMe/lib/css/define_events.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Wed, 24 Apr 2024 09:51:20 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2910
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/index.css?v=202404

46.105.38.139

200 OK

2.8 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/index.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
assembler source, ASCII text
Size
2.8 kB (2753 bytes)
Hash
00c2a2d5c04ec9a47cff4fc4e82a9bb7
20511c2eee38d95bac3d132fe6c4a62f372fa27b
af6cd6812ce25569000ea53cf122c580cb9626c8c727e9c686f0f65e91630318

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/index.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2753
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/define_statesmission.css?v=202404

46.105.38.139

200 OK

226 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/define_statesmission.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with CRLF line terminators
Size
226 B (226 bytes)
Hash
867a2d294038115978d959347f6d1c1d
bdf1e34c1599c56ccd638bd5ccb83f778b12167b
1cdada3624741b22cde76cb606595096ad2bd795e8570caa348b4624e276fbeb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/define_statesmission.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Wed, 24 Apr 2024 09:51:20 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 226
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/dist/css/AdminLTE.css?v=202404

46.105.38.139

200 OK

16 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/dist/css/AdminLTE.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
16 kB (15486 bytes)
Hash
57f8c842c0b10ba58e75d3f1a9454fa7
57ae5ef7e20188e6cdc497cf69b3c561f0f81cea
fa3ebb5a67b5bce61cfcd01bc201668e839b7eb902035c2bab3449f67cd1d0f9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/dist/css/AdminLTE.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 15486
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap/3.4.1/css/bootstrap.min.css

46.105.38.139

200 OK

20 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap/3.4.1/css/bootstrap.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (65369)
Size
20 kB (19586 bytes)
Hash
7f89537eaf606bff49f5cc1a7c24dbca
b0972fdcce82fd583d4c2ccc3f2e3df7404a19d0
6d92dfc1700fd38cd130ad818e23bc8aef697f815b2ea5face2b5dfad22f2e11

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/plugins/bootstrap/3.4.1/css/bootstrap.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 19586
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/loading.css?v=202404

46.105.38.139

200 OK

3.4 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/loading.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (2130)
Size
3.4 kB (3430 bytes)
Hash
19bf6646535adea0d2e3948472d486cd
5d9e8db1f0e35ec85fbe29463b5a692268a28d55
95da27f986431d80599bc403a0c1efecbcf709e3f3ef5111dbbc3a8e6c1b7e08

HTTP Headers

GET /FolloWMe/lib/css/loading.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3430
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/effects.css?v=202404

46.105.38.139

200 OK

1.2 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/effects.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.2 kB (1237 bytes)
Hash
a181b1d42de7332d1b47ff0fbc65c804
5f7e17939ade7bedf642bacf0b426b9b67a6d65e
66951e50037977c502b1b2ffb7a62f9dee04ff7e573ae769e195fa4de3d92ed5

HTTP Headers

GET /FolloWMe/lib/css/effects.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1237
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/ckeditor5/build/ckeditor.css?v=202404

46.105.38.139

200 OK

2.5 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/ckeditor5/build/ckeditor.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
2.5 kB (2450 bytes)
Hash
24dc9d9076344c8024713869d55df698
16d67063ef5cd07283daf3417df5d05c33e1a15f
66585c381e26136d987c61d709e300b808fc45794bbc9bd449191599e9e36344

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/ckeditor5/build/ckeditor.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 05:59:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2450
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/threedots.css?v=202404

46.105.38.139

200 OK

2.8 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/threedots.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Unicode text, UTF-8 text, with very long lines (322)
Size
2.8 kB (2794 bytes)
Hash
1b033ef22339b4664fc72ae9fc6648f5
c932a8c623716498084f43e0a36adcad39a4168e
131e3d86503221c21e8ee7d60de5c0251d895d2043a347e329d80c91810a9a5d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/threedots.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:28 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2794
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/animate.css?v=202404

46.105.38.139

200 OK

4.4 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/animate.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
4.4 kB (4360 bytes)
Hash
8ab512f28e99b14ef5edc1e6dcaefc0b
3afbaa77e64db0bea22ce122a386786bedcda532
a81ea983b84005bfe4b535d4576aa7676d7afcee689baed42012bf6b3733515d

HTTP Headers

GET /FolloWMe/lib/css/animate.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 05:59:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4360
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap-select/1.13.14/css/bootstrap-select.min.css

46.105.38.139

200 OK

2.2 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap-select/1.13.14/css/bootstrap-select.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (10879)
Size
2.2 kB (2219 bytes)
Hash
a04495fa5762cca97a2df5b310e7a386
f9795cce1d75e24688f0930f805a8f8c97a46a34
e229aa011271915a7ee47e63d7194745b3f638a22c47c5dfd77a5ebc8178e5a0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/plugins/bootstrap-select/1.13.14/css/bootstrap-select.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2219
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/datetimepicker/bootstrap-datetimepicker.min.css

46.105.38.139

200 OK

1.3 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/datetimepicker/bootstrap-datetimepicker.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (7669)
Size
1.3 kB (1311 bytes)
Hash
fc28fdcaebe06f95b628b7afff4afa9e
bfb59134728691755a4b00deebf21ba39adee2d9
c8c8da579e363feab54671fa5c1c823c37d416198e69f59b78b3e6a8a875d73a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/datetimepicker/bootstrap-datetimepicker.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1311
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/datatables/dataTables.bootstrap.css

46.105.38.139

200 OK

1.9 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/datatables/dataTables.bootstrap.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.9 kB (1941 bytes)
Hash
4631cf69502e63cdff119e0bce670725
eeb550f15b2fcc16b0e756122e8d31b030db10bf
250e092870131d692395356d30ce1723cdac6db6ad23097834f2ad41454d1b11

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/datatables/dataTables.bootstrap.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1941
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/daterangepicker/daterangepicker.css?v=202404

46.105.38.139

200 OK

1.6 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/daterangepicker/daterangepicker.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.6 kB (1601 bytes)
Hash
681eaf47233303f4b7d36fcfada95016
337b8a998f40661477ccb95680fc9c7dd760b60a
f5ef4c7e64475909a9e32315f91f5cc5753af998f3076c7e61c1386752a6b9a8

HTTP Headers

GET /FolloWMe/plugins/daterangepicker/daterangepicker.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:28 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1601
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/fullcalendar/fullcalendar.min.css?v=202404

46.105.38.139

200 OK

3.7 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/fullcalendar/fullcalendar.min.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (16046)
Size
3.7 kB (3650 bytes)
Hash
a3f5a337345c6d440d8a6aeac931afdb
d99adf4d483abf657354c7dfb71030baaaf1ba47
93f5c7d2340d52a0817cd821cdf0fb03bd9336f142b6921187df087bd5ef302d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/fullcalendar/fullcalendar.min.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:42 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3650
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/taggle/taggle.css?v=202404

46.105.38.139

200 OK

1.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/taggle/taggle.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.1 kB (1075 bytes)
Hash
76388a0e93ba78d911fcb20d1168f900
1e75c96e94a41133a91fc0af8d0a791a3feca704
7d8043479c0722d335d7986b24d6735f7c3a7146975eb19bf3b346d974b88ac4

HTTP Headers

GET /FolloWMe/plugins/taggle/taggle.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Tue, 02 Apr 2024 12:03:12 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1075
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/bootstrap-switch/bootstrap-switch.min.css

46.105.38.139

200 OK

2.6 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/bootstrap-switch/bootstrap-switch.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (19376)
Size
2.6 kB (2578 bytes)
Hash
e8bdbca6bf91b68d814e77c917999c88
f61eb36ab6d408b862504f828320d75235b5d8b7
5257d6784a07660a4cfae3642a9fe0f359024046b272392f13147116fee40267

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/bootstrap-switch/bootstrap-switch.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2578
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/ion.rangeslider/ion.rangeSlider.css

46.105.38.139

200 OK

830 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/ion.rangeslider/ion.rangeSlider.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Unicode text, UTF-8 text
Size
830 B (830 bytes)
Hash
ebeaf8ee0e04d67d172ee639713fad1b
81dc58f28df7ca458306d493ae9c78c8450d48f8
e5ce02a6caedb279a23c84d2f04055f556fc03a44f3fa6f92f038288fbc70484

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/ion.rangeslider/ion.rangeSlider.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 830
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/bootstrap-slider/slider.css

46.105.38.139

200 OK

1.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/bootstrap-slider/slider.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.1 kB (1053 bytes)
Hash
b10d98b31e98767a40cfd9b3d927b7ea
f3afc0ee93d802bec9915688107f5f7ae9ed88a3
74354ef6eb7db5f861aa9e73a6c6b38e67d01535ab05760e48e5a046139e3c17

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/bootstrap-slider/slider.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1053
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/timepicker/jquery.ui.timepicker.css

46.105.38.139

200 OK

831 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/timepicker/jquery.ui.timepicker.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
831 B (831 bytes)
Hash
c34110453ddfe50dac839fbd51fb3316
8f638b8946d0b61ba5d2e73635ede04d40a416ee
8f77353240100daad2cd0a7d6bf78788800db047db6f824b2fd3916eda3c4fa0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/timepicker/jquery.ui.timepicker.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 831
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/toggle/bootstrap-toggle.min.css

46.105.38.139

200 OK

543 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/toggle/bootstrap-toggle.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
543 B (543 bytes)
Hash
94dc143d099325003c266df15d85334e
980a7b7c532fa58e8838317631ef72a56c296c36
ac3597e97ae646db56c9505e3e19aba479e767510f98ce96411425ea1d21ec9f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/toggle/bootstrap-toggle.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 543
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/blueimp-gallery/blueimp-gallery.min.css

46.105.38.139

200 OK

1.5 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/blueimp-gallery/blueimp-gallery.min.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (6727), with no line terminators
Size
1.5 kB (1485 bytes)
Hash
6fc4384a52d1988ada0824423acc4953
11482c0c86f0371e00b108b848c2ebb9d238c797
4ca1e2554b1c7b88708564ce8abed99a8e73dc57e134d32c6560795b2b61b5b9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/blueimp-gallery/blueimp-gallery.min.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1485
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/touchspin/jquery.bootstrap-touchspin.css

46.105.38.139

200 OK

306 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/touchspin/jquery.bootstrap-touchspin.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
306 B (306 bytes)
Hash
c82a1dde47ad0956ce4a8a71761cc87e
2b59a1bc66421246f642c1b866a4fea07210075b
ea40d450aba1b968363c725912b035222155046a64acc60f14829a3e53e2006c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/touchspin/jquery.bootstrap-touchspin.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 306
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/leaflet/L.Icon.Pulse.css

46.105.38.139

200 OK

326 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/leaflet/L.Icon.Pulse.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
326 B (326 bytes)
Hash
671d6dbe94d15748512f8a8290434c08
56dfa0a599d4c86a1863518dda6234317295a3d3
a0f5c61b032fd0123c1545db7e6c8a69c63bc96a922d4b0d7bc95776443b8740

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/leaflet/L.Icon.Pulse.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 326
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/Encryption.js

46.105.38.139

200 OK

1.3 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/Encryption.js
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.3 kB (1309 bytes)
Hash
ac117becbf43a224a7416f33d481e11b
991cd07c6777f6cdca44d3b04cdd458b06f55fe3
c607076e231d7c3e85a2c27c591c8f404bddcaa78cefc4b4bef8b1edc3a7b199

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/Encryption.js HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1309
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/reactions/css/reaction.css?v=202404

46.105.38.139

200 OK

1.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/reactions/css/reaction.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.1 kB (1121 bytes)
Hash
edbc28d7fa0feb1caffe1a7af4430704
9e0da03bad27b7534821020fde7c594b5ddbb8d6
24fc269b13e0339c77fddb6e92a134e17986eb8539a732aeb9911f8af483b317

HTTP Headers

GET /FolloWMe/plugins/reactions/css/reaction.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:42 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1121
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/ion.rangeslider/ion.rangeSlider.skinHTML5.css

46.105.38.139

200 OK

834 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/ion.rangeslider/ion.rangeSlider.skinHTML5.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Unicode text, UTF-8 text
Size
834 B (834 bytes)
Hash
7527c2a31899e27ddbc0fcba8dfc3b8d
2bfe9183e5bb96bc47182777db08e6b21b5feee6
1c66f216c5a9d7f0302d8fc6f081e44405b1d7b0365b802bb03356647da46c49

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/ion.rangeslider/ion.rangeSlider.skinHTML5.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 834
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/design2.0/design2.0.css?v=202404

46.105.38.139

200 OK

274 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/design2.0/design2.0.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
274 B (274 bytes)
Hash
6c5289d37ab3b83c14e23513290d477d
150c07916a948a49397652df9236f09315dbee88
16270fa24ecd7e575e4a2b397ea4232115ea5f2ee28b59f456c7fff7cd930add

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/design2.0/design2.0.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 09:11:24 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 274
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/individuals.css?v=202404

46.105.38.139

200 OK

1.0 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/individuals.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
assembler source, ASCII text, with very long lines (473)
Size
1.0 kB (1014 bytes)
Hash
b50bce01f1e3188ef54154eaaa481df5
ebc0ff92ccfababc9870c49c90e5b1adae413eb2
a79bbeb9d9e80b2811c8a316ac351cc0be1be1d7d7f17e204618afdab6b894e4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/individuals.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Tue, 19 Mar 2024 08:14:55 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1014
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/openai.css?v=202404

46.105.38.139

200 OK

248 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/openai.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
248 B (248 bytes)
Hash
fbacd62378bba9e419ff1645dc5980c8
ab2ab61c25f41b700e0ffd00f9e46034cbef05b3
c2f3991364d38f1330df62204430c7e0c89d4fe5e03afe3165b674ed7e787308

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/openai.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 248
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/reactions/php/reaction.php

46.105.38.139

200 OK

390 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/reactions/php/reaction.php
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (2877), with no line terminators
Size
390 B (390 bytes)
Hash
61c699c5c53c47fdbd2be1ec35bfe276
81a7b3b20a67fbb0e9f1bd18a83390f5c7a46b86
bd8fac19bd2527960a568b21cc8ec0572c9a240afce709cf605d5f9b94283a2f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/reactions/php/reaction.php HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 390
content-type: text/css;charset=UTF-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/star-rating/star-rating.css?v=202404

46.105.38.139

200 OK

1.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/star-rating/star-rating.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.1 kB (1094 bytes)
Hash
b2ee0429581963831c78bf5ea2f2bcc0
7afc53990467327d9046758f863dd859e699b25d
e9646cf72d70b5a098382184a962d459dbd22c7c682a7960c3354dca96db1a2e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/star-rating/star-rating.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 05:59:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1094
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css

46.105.38.139

200 OK

287 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
287 B (287 bytes)
Hash
984e2d0a73d42ce940e24d16e7b7636f
9569852a3acb017552ecb6484d7ab2a2392a6fb0
292fca03a97afd382299c051a1b157d3bccee0b0236004ab5df17bf531419354

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/all.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 287
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMeShareDocs/societies/logos/beluxrepm.png?v=20240426093637

46.105.38.139

200 OK

10 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMeShareDocs/societies/logos/beluxrepm.png?v=20240426093637
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
PNG image data, 726 x 204, 8-bit/color RGBA, non-interlaced
Size
10 kB (10015 bytes)
Hash
64b4304845b379b2d39ab1dab92b3ff5
38aa865dd7507dd60339ebbcb80a05be2602507a
55c96ce78e28d16eb6546f3fd46d14c8399fc8617ba24246f047cb6acdb9af88

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMeShareDocs/societies/logos/beluxrepm.png?v=20240426093637 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Thu, 20 Jan 2022 09:50:12 GMT
accept-ranges: bytes
content-length: 10015
cache-control: max-age=2592000
expires: Sun, 26 May 2024 07:36:38 GMT
content-type: image/png
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/IntlInputPhone/css/intlTelInput.min.css?v=202404

46.105.38.139

200 OK

2.9 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/IntlInputPhone/css/intlTelInput.min.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (19681), with no line terminators
Size
2.9 kB (2882 bytes)
Hash
5ede81977e274379eb7b3dc5418df5ff
49e4344be0a8a5dc371e74198b2f689fcaf5bbf8
6dde7bf28e7bb91a5119992bed7e28b5dbd62dd6687b784a3efff9754b120c4d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/IntlInputPhone/css/intlTelInput.min.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:42 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2882
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/jQueryFileUpload/css/jquery.fileupload-ui.css

46.105.38.139

200 OK

608 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/jQueryFileUpload/css/jquery.fileupload-ui.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
assembler source, ASCII text
Size
608 B (608 bytes)
Hash
f876f983c4978d2cb1798d89b51f0d04
b7852d7dc15de95439d2798a86bc181b9ca93d0e
66d3e050ff33dd6f6045034b3c10223effb38c157b6c684a596f0b3d202c24aa

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/jQueryFileUpload/css/jquery.fileupload-ui.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:33:54 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 608
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/blogs.css?v=202404

46.105.38.139

200 OK

556 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/blogs.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
556 B (556 bytes)
Hash
acb784e48e8e8a8a6dcd9cdadd2619d1
38230b81d4cf332ae6990d192a43e50c562649c2
0796df1c2dbe35e496f414d1d3f928076202a19778c9312ed7150f33f570c947

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/blogs.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 556
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/jQueryFileUpload/css/jquery.fileupload.css

46.105.38.139

200 OK

399 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/jQueryFileUpload/css/jquery.fileupload.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
assembler source, ASCII text
Size
399 B (399 bytes)
Hash
e22bc663785f83772a4498b55da9528a
b81dec522eefc54ff991f18b17754744b0bdbd88
a18575f08f26474ade5c2e67144d022640c4ec9bbb86de26ce8f5706e9d45690

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/jQueryFileUpload/css/jquery.fileupload.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:33:54 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 399
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/sites.css?v=202404

46.105.38.139

200 OK

608 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/sites.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
608 B (608 bytes)
Hash
7bbbf419e2fcdc2d9fa74d879afd9705
0c221413cf68072b87e098481d5f282dac84d1aa
243176d8fd19a18241139cab25b8fd7f5c4fc19e3b998224ecbfc2265c59c908

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/sites.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 608
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/login.js?v=20240426093637

46.105.38.139

200 OK

849 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/login.js?v=20240426093637
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
JavaScript source, ASCII text
Size
849 B (849 bytes)
Hash
16a7fcb0a138606da11de4faa9e44ef0
d97ed16a9e8349c5fd3ee80476662c9e63736537
721873313a21e5e7bd89388d22f1c6e6da784f506dc074699932ea3be37fb110

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/login.js?v=20240426093637 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 849
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/ajax.js?v=20240426093637

46.105.38.139

200 OK

1.5 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/ajax.js?v=20240426093637
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
JavaScript source, ASCII text
Size
1.5 kB (1506 bytes)
Hash
79b6b68179f0716844f03d9f57937df1
b5de53841aafffb78fb448c348c7b38ee2b007fe
93ce73d6d742aeb34c53520e8c2b57d63864314d1dc137930fb25c541984dba4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/ajax.js?v=20240426093637 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Tue, 02 Apr 2024 12:03:12 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1506
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/events.css?v=202404

46.105.38.139

200 OK

711 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/events.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
assembler source, ASCII text
Size
711 B (711 bytes)
Hash
6603d6fcd9c261e6eab8fd9f9050b285
f0f26b2a9bff51fb42410c13a1710bb52f8d0e39
685b2e1837f6526fee9d22a0941a0d8dd6f6fa11fca22d6d42c2222353192ef4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/events.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 711
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/docs_manager.css?v=202404

46.105.38.139

200 OK

4.0 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/docs_manager.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Unicode text, UTF-8 text
Size
4.0 kB (3951 bytes)
Hash
12429a806d618a2940a407ae6914bf77
eaeb4845ff268e2e86acdf9954df40ddbc763d7e
debf9668c94e54b20805959f6db0bea817d6462d8046add9916db821c86b4d98

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/docs_manager.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:42 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3951
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/leaflet/leaflet.css

46.105.38.139

200 OK

3.2 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/leaflet/leaflet.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
3.2 kB (3218 bytes)
Hash
0711c8311bb08feb1a0a4d46c3d4c29c
498387417b031237e20cf1a96a534b46301eae4b
354ca46668b891bb2a7f2c345e04b09a3525a6a5bfbbbe33bb989b2bd0ee8926

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/leaflet/leaflet.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3218
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/selectize/selectize.css

46.105.38.139

200 OK

2.2 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/selectize/selectize.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Non-ISO extended-ASCII text, with very long lines (4077)
Size
2.2 kB (2168 bytes)
Hash
426cba3ece991996038647e0c6d64811
01b36659d51dd9f676898ffe2ab324b97ec94195
1c1c6bc02f6859f13e9b1a02f82ebf7c6c57b16b343793aac5ca566e8e374e9a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/selectize/selectize.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 05:59:14 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2168
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/missions.css?v=202404

46.105.38.139

200 OK

6.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/missions.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
6.1 kB (6107 bytes)
Hash
0ec6364b1baecbf841289fb8ef09c450
dde137316010b3e0927cf52df50fb849ab15ebbd
377758aa6de4ee0773948a513f66d5c4a23df141d2c593eceadfd27b5af0d4e7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/css/missions.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Tue, 02 Apr 2024 12:03:12 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6107
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/bootstrap.min.js

46.105.38.139

200 OK

9.5 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/bootstrap.min.js
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
JavaScript source, ASCII text, with very long lines (32148)
Size
9.5 kB (9512 bytes)
Hash
b6d6c550cb657155feb06fdcd34b73cb
27947c0c0fa837da9bdfdfc36f649c25f54bd1c0
267a83092a5fd6ec5fb746bce12d440abd37f1d649c072f653e17d0c800eb647

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/bootstrap.min.js HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9512
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/faqs.css?v=202404

46.105.38.139

200 OK

617 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/faqs.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
617 B (617 bytes)
Hash
9bef46adc75011a0b9d4bd59f3759d88
31544d9c914aa6acf4c064ec896266183024aa85
8cd6bc46a73101289c48eb27c05f7a24e749e4975e90dec51c85bb86646ee56e

HTTP Headers

GET /FolloWMe/lib/css/faqs.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 617
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/css/filters.css?v=202404

46.105.38.139

200 OK

245 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/css/filters.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
245 B (245 bytes)
Hash
315aea8bf3699e52fe0168580463d364
6bf725705b47894886b09b68165acee36e0e3140
2273a16c9effe2d576fdbad190cd9e45c8e47440f4b165df8aa035f37ad6c007

HTTP Headers

GET /FolloWMe/lib/css/filters.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:33:54 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 245
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/crypto-js.js

46.105.38.139

200 OK

31 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/crypto-js.js
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (756)
Size
31 kB (31372 bytes)
Hash
60ab5dbd46dfa34dfef3c1548a22a978
3dd73b6f13dc818a3a9c5c7424c1c4a9649b00a2
c6826494432163d74fd27e78ad011a13d55e4670441cd49fc9f1e52a4afd28d9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/crypto-js.js HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 31372
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery.min.js

46.105.38.139

200 OK

33 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery.min.js
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
JavaScript source, ASCII text, with very long lines (32089)
Size
33 kB (32729 bytes)
Hash
397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/jQuery/jquery.min.js HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 32729
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap/3.4.1/fonts/glyphicons-halflings-regular.woff2

46.105.38.139

200 OK

18 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap/3.4.1/fonts/glyphicons-halflings-regular.woff2
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
Size
18 kB (18028 bytes)
Hash
448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/plugins/bootstrap/3.4.1/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://beluxrepm.followme.fr/FolloWMe/lib/plugins/bootstrap/3.4.1/css/bootstrap.min.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 17 Mar 2024 10:34:01 GMT
accept-ranges: bytes
content-length: 18028
cache-control: max-age=2592000
expires: Sun, 26 May 2024 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/minimal/_all.css

46.105.38.139

200 OK

1.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/minimal/_all.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.1 kB (1063 bytes)
Hash
f7d384b69f83eab5fb44c058fdb9c92b
4f4feff4f80386c205eb5a4928538519b1ea674f
4d58e2ca02c7e649914c08be645422eb6ccd9d515d221c2c7d33d7f908f5b6a4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/minimal/_all.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1063
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/square/_all.css

46.105.38.139

200 OK

1.2 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/square/_all.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.2 kB (1168 bytes)
Hash
d972eb2ee10c5e2edbba8edf61700817
ce4cbd345a783f2e46543b50ddc419fd8e029222
b2273d192ca8456d0cc8960cdd9f3827f7f85a6baaa376b8f0b5af613ed59222

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/square/_all.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1168
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/futurico/futurico.css

46.105.38.139

200 OK

444 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/futurico/futurico.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
444 B (444 bytes)
Hash
63ad182fa03de6924d05d4141b97e931
fb02e349dc5fab1494559b78780cb57f3b97f823
39da4a95eacf6b9fde5ef5fd1df0abfbb08df8d040b7de57926ac50dee283cc1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/futurico/futurico.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 444
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/flat/_all.css

46.105.38.139

200 OK

1.1 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/flat/_all.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.1 kB (1060 bytes)
Hash
6946ef97e86a65c142f9605f4d78a37c
dc7c8ffd998b15bb91c52e22c4aca72efdc30380
a19cee2821ca39a17fd98a8b1ca6738dbf43e4b78d79ae9f2a747ef8e0ebec3f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/flat/_all.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1060
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/polaris/polaris.css

46.105.38.139

200 OK

458 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/polaris/polaris.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
458 B (458 bytes)
Hash
c1f2d5935133a73fa69ac1fe6b43b9dd
058b9a99053fc3c697c0a30b7bcb562f97976c48
660a092c8a41877bcc29c9480393aea96ee81787bbcab6fcd24ca3ee09e55c7f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/polaris/polaris.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 458
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/iCheck/line/_all.css

46.105.38.139

200 OK

1.7 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/iCheck/line/_all.css
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text
Size
1.7 kB (1689 bytes)
Hash
8e915da0245c086d21ccc5349f5c05f3
7504b05a5638a2e8f71afd7e7c0c2daf55eeb6aa
9a4a602b96cf7b928d4599a3c861ff3c81e7fb353b55736b3aeb8c40cdbebc34

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/iCheck/line/_all.css HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/plugins/iCheck/all.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Mon, 26 Oct 2020 14:27:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1689
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/design2.0/Amaranth-Regular.ttf

46.105.38.139

200 OK

34 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/design2.0/Amaranth-Regular.ttf
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
TrueType Font data, 17 tables, 1st "GPOS", 13 names, Microsoft, language 0x409
Size
34 kB (34528 bytes)
Hash
5f274104168dac1f3c25b18ffb59878f
31183b9474598109c8a98de48f0dfbda02c117e2
9cfa369cadb1b96982bbf2fe4c9eaeb96fb1483245c36b3b99295312f8f26d91

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/design2.0/Amaranth-Regular.ttf HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/design2.0/design2.0.css?v=202404
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 09:11:24 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 26 May 2024 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 34528
content-type: font/ttf
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/plugins/fullcalendar/fullcalendar.print.min.css?v=202404

46.105.38.139

200 OK

656 B

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/plugins/fullcalendar/fullcalendar.print.min.css?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
ASCII text, with very long lines (1791)
Size
656 B (656 bytes)
Hash
e4467da20fae2550259eba7e02ec5a25
04c37cc6f34f2d27b30cda6c9f1cbee3c86f83ab
032adc347f528079a705abaf5671659a5633a08eb1d7c10df09a266c59b7b75e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/plugins/fullcalendar/fullcalendar.print.min.css?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:42 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 656
content-type: text/css
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/translations/translations_catalog_en.js?v=202404

46.105.38.139

200 OK

40 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/translations/translations_catalog_en.js?v=202404
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
40 kB (39802 bytes)
Hash
a40f7c8bc8258fb2442be9bb579dea59
d50119359fb70e6aabdca0a3728c35f2a51999c5
f8c739ac0d157c73917b13df3f94d18429154592278be5dd96136ca21b1b4aac

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/translations/translations_catalog_en.js?v=202404 HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Wed, 24 Apr 2024 07:38:18 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 39802
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/favicon.png

46.105.38.139

200 OK

10 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/favicon.png
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type
PNG image data, 40 x 22, 8-bit/color RGBA, non-interlaced
Size
10 kB (10322 bytes)
Hash
6e081e263c52b887d1efd4d789007117
7d239848b39bd70279787e5f4b32c7ffe15983a4
503211e110b00ee41ce3984ed5785e3e18f8342146e37ab9c26f6dcde0efffe4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/favicon.png HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:28 GMT
accept-ranges: bytes
content-length: 10322
cache-control: max-age=2592000
expires: Sun, 26 May 2024 07:36:38 GMT
content-type: image/png
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery-ui.min.js

46.105.38.139

200 OK

255 kB

URL GET HTTP/2
beluxrepm.followme.fr/FolloWMe/lib/js/jQuery/jquery-ui.min.js
IP
46.105.38.139:443
ASN
#16276 OVH SAS

Requested by
https://beluxrepm.followme.fr/FolloWMe/login.php
Certificate
IssuerLet's Encrypt
Subject*.followme.fr
FingerprintD4:D0:29:A9:63:95:E0:48:6A:B4:18:89:91:6B:A8:EA:FD:2D:E0:6C
ValidityWed, 10 Apr 2024 19:31:36 GMT - Tue, 09 Jul 2024 19:31:35 GMT

File type

Size
255 kB (255084 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BNP Paribas

HTTP Headers

GET /FolloWMe/lib/js/jQuery/jquery-ui.min.js HTTP/1.1
Host: beluxrepm.followme.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beluxrepm.followme.fr/FolloWMe/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tga3a0e4c6t10svtclmasefqmc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
date: Fri, 26 Apr 2024 07:36:38 GMT
server: Apache
last-modified: Sun, 08 Oct 2023 13:37:42 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sat, 26 Apr 2025 07:36:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: sameorigin
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(*), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), layout-animations=(self), legacy-image-formats=(self), magnetometer=(self), microphone=(*), midi=(), notifications=(self), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-get=(), push=(self), speaker=(self), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML