impot-refgouv.fr/
301 Moved Permanently 162 B IP
ASN #16095 Sentia Denmark A/S
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET / HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 18 Oct 2022 22:08:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://impot-refgouv.fr/
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 18 Oct 2022 21:51:31 GMT
Expires: Tue, 18 Oct 2022 22:37:45 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: F7kVJhJrRfb9_aOYxGTBvcQGm7YoqptiUlu4mUoandgvLNcW0ORwnQ==
Age: 996
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10ab470535c002d333b4f27d38b51091
ed3b0850c5d75881de410f7e8ca35e012e38bd38
31d6655d048ec8a62e00125766fea65cde04beae0b11f12ce7f722c9a5f7e232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31D6655D048EC8A62E00125766FEA65CDE04BEAE0B11F12CE7F722C9A5F7E232"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11488
Expires: Wed, 19 Oct 2022 01:19:35 GMT
Date: Tue, 18 Oct 2022 22:08:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 533e1d53f291993ed5886f88a85c6e55
eb4396e8422f71168d32ac6ff3ef49496f625e62
0d1b73b2a228fe76bf14688e603741025a40803971e05570f873b28788334b33
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D1B73B2A228FE76BF14688E603741025A40803971E05570F873B28788334B33"
Last-Modified: Mon, 17 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7003
Expires: Wed, 19 Oct 2022 00:04:50 GMT
Date: Tue, 18 Oct 2022 22:08:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: whIqzOvIjCxUzX5HRhRTeVnA2bl+utXzm35tylrj2nto7GPo43bI3QaDfHjY1ncvE1jP7u0jlXKj7tMJmFbqow==
x-amz-request-id: 8VYABZW71DG5QWPH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 18 Oct 2022 22:04:01 GMT
age: 246
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e05519b041815f59eabd8f9ebcb42794
19a72a669874195dbb9fea752ce3af97f31b128c
0b5a4f64e57c02f5150e155ad3467d6acf445ab04b13e815063cef74b927c35f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B5A4F64E57C02F5150E155AD3467D6ACF445AB04B13E815063CEF74B927C35F"
Last-Modified: Mon, 17 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21579
Expires: Wed, 19 Oct 2022 04:07:46 GMT
Date: Tue, 18 Oct 2022 22:08:07 GMT
Connection: keep-alive
impot-refgouv.fr/
302 Found 0 B IP
ASN #16095 Sentia Denmark A/S
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Tue, 18 Oct 2022 22:08:07 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: Particuliers authentification.html
x-powered-by: PHP/8.0.24, PleskLin
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/spi.svg
200 OK 5.5 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/spi.svg
IP
ASN #16095 Sentia Denmark A/S
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, Unicode text, UTF-8 text
Hash 0d59ec026a9708271caca148c56959df
02cc9a6887e9ca7ac69729d499813436157546a4
2be11b4cf348ebdb13674d8cf0d1938df9c71f0f64fb0fb70fa08ed40830f684
GET /Particuliers%20authentification_files/spi.svg HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: image/svg+xml
content-length: 5485
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "62f13a74-156d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/num_acces.svg
200 OK 6.4 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/num_acces.svg
IP
ASN #16095 Sentia Denmark A/S
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, Unicode text, UTF-8 text
Hash 44f52f8bcf815b2a962c029c9fb41440
c8608e65a9b82d02ae133834543c28aecd103325
880cbec4f5672334414f9b979a09ad51f7158c92a694bbabfc8a83538c8e0e2e
GET /Particuliers%20authentification_files/num_acces.svg HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: image/svg+xml
content-length: 6414
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "62f13a74-190e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/logo-fc.svg
200 OK 14 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/logo-fc.svg
IP
ASN #16095 Sentia Denmark A/S
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f3c02532347779d974e702c09cf85019
9eec54318e9c5f892342b7c259c081dd88e6ea4b
f38f88db94a67b5fcc8f90965a6623a509e35cb81b6b252f0c9d7fdd29ff1a88
GET /Particuliers%20authentification_files/logo-fc.svg HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: image/svg+xml
content-length: 13893
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "62f13a74-3645"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/rfr.svg
200 OK 13 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/rfr.svg
IP
ASN #16095 Sentia Denmark A/S
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, Unicode text, UTF-8 text
Hash 3a1ecefe2e0d9605fe4d647902159cad
8586a81974bb58c1e17380b8d692bf468d1246cd
5ae03f34bdff7916f1dd42d760a41c0b5b939aafc3fc5e733bf6903b03421d94
GET /Particuliers%20authentification_files/rfr.svg HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: image/svg+xml
content-length: 13299
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "62f13a74-33f3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/Small-logoSMART.png
200 OK 2.3 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/Small-logoSMART.png
IP
ASN #16095 Sentia Denmark A/S
File type PNG image data, 225 x 225, 8-bit colormap, non-interlaced\012- data
Hash c546c9a78e206d482076fae524cedbe5
d9ad14007be975fb477763f26ce653e332b56c70
dfcae6bf0ca22253e333881e0bf7eb42d14057eb00024a5bd19943b04cbb95ec
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/Small-logoSMART.png HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: image/png
content-length: 2347
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "62f13a74-92b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/dac.css
200 OK 437 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/dac.css
IP
ASN #16095 Sentia Denmark A/S
Hash c1124596b18d57508ee39db304da59d4
7cc5b65c9902ae98e82a1cf9a884f4fa3f9d2aeb
403448fd4658eddab6100cb7bcf32fdaf63f924f1181f17e7a12beae252d8506
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/dac.css HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: text/css
content-length: 437
x-accel-version: 0.01
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "303-5e5bd5a2c8500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/spi1.svg
200 OK 4.0 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/spi1.svg
IP
ASN #16095 Sentia Denmark A/S
File type SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (4014), with no line terminators
Hash 9b3c39ed6edf582c7f571289b4dbc725
28abdf9efc2cf91ec83f48d29313de71198905c0
434c00e8f522092a173a70f7f6e95747cf8c2b75328bdf76c6ed1e4b2039cbbc
GET /Particuliers%20authentification_files/spi1.svg HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: image/svg+xml
content-length: 4024
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "62f13a74-fb8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/configuration.js
200 OK 467 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/configuration.js
IP
ASN #16095 Sentia Denmark A/S
Hash 709b8a900edb0a69a1125948bdf0fa93
b70b409ea436a3508143cee402e2cdbf1d5bfc3b
b58c04266cb0744519eb7d15a287045cfa59ea34cc3a62ce71c602750d24e822
GET /Particuliers%20authentification_files/configuration.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
content-length: 467
x-accel-version: 0.01
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "3a1-5e5bd5a2c8500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/franceConnect.js
200 OK 126 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/franceConnect.js
IP
ASN #16095 Sentia Denmark A/S
Hash b3ef4b26432540c106ccc9f1ab2b160b
16d0bc9778928680b7799f9586371a2bebf4ee1b
6a6155c324c6abe7a8d61e6ea05d568c8fe6165040b13c33381c5b5a193b758c
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/franceConnect.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
content-length: 126
x-accel-version: 0.01
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "9f-5e5bd5a2c8500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/urls.js
200 OK 248 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/urls.js
IP
ASN #16095 Sentia Denmark A/S
Hash 625b7f89f3ad3c97aa756d0c045119e3
d477e4cb09b38d10d7abaa173b8ed29107ae2fae
6d6fbb7e00363a9383061138d53f4370db341c045dd78d8042d0e6a99eea240c
GET /Particuliers%20authentification_files/urls.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
content-length: 248
x-accel-version: 0.01
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: "23b-5e5bd5a2c8500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
impot-refgouv.fr/polices/open-sans-latin-ext-regular.woff2
200 OK 19 kB URL HTTP/2 impot-refgouv.fr/polices/open-sans-latin-ext-regular.woff2
IP
ASN #16095 Sentia Denmark A/S
File type Web Open Font Format (Version 2), TrueType, length 19392, version 1.0\012- data
Hash 6e2308ee6037e901e59de209310cf5ff
cea4c2bb4465f3c1a7692d2b218c3b1a41b7426a
516c7b2926dbd461e33f19ff05db8587e5990184dba657483d5a569cc099a8ee
GET /polices/open-sans-latin-ext-regular.woff2 HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification_files/commun.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: font/woff2
content-length: 19392
last-modified: Mon, 08 Aug 2022 16:49:34 GMT
etag: "62f13e9e-4bc0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
impot-refgouv.fr/polices/dgfip_dgfipicons.woff
200 OK 94 kB URL HTTP/2 impot-refgouv.fr/polices/dgfip_dgfipicons.woff
IP
ASN #16095 Sentia Denmark A/S
File type Web Open Font Format, TrueType, length 93700, version 1.0\012- data
Hash 53f606d531c08964174e91d4c4dfb345
daf42355520971c9b707756869f269c77e0eddf4
254798574aeb4e94ef4b45f271e804f0b63eb45def80468d9af516213ebe13dd
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /polices/dgfip_dgfipicons.woff HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification_files/commun.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: font/woff
content-length: 93700
last-modified: Mon, 08 Aug 2022 16:52:08 GMT
etag: "62f13f38-16e04"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 18 Oct 2022 21:43:40 GMT
Cache-Control: max-age=3600
Expires: Tue, 18 Oct 2022 21:54:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r5G-GchmyDZnCJmOMgIhhHs0FYJb0H084d9WcuIwKCZiorJq-HLqZA==
Age: 1468
impot-refgouv.fr/Particuliers%20authentification_files/bootstrap.min.css
200 OK 18 kB URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/bootstrap.min.css
IP
ASN #16095 Sentia Denmark A/S
File type ASCII text, with very long lines (64976)
Hash 46c857b0a77c73c61d1e3188d418e484
dbce52056c989d6b3fa04f0c52aa06c115a989d4
0c442b8a41a5f1470b1b48dd4810f630820ed350c0f3896fa4d0c3067b5251e4
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/bootstrap.min.css HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-1a442"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash f8e83de170e896c45e1822a6b9a9d968
c979e58a9d15d1f01b4622acbdfb04583d20998a
aaf289c44960ee7f0f5d97733900849e4702b38eada29d722a2b485f9d047937
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:08:08 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 22:12:16 GMT
Expires: Sat, 22 Oct 2022 22:12:15 GMT
Etag: "c979e58a9d15d1f01b4622acbdfb04583d20998a"
Cache-Control: max-age=603064,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 939
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75c49743e8b4b4f9-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 6a101fb80f342a51e31b00aab2a268f8
8c441ff51d8b3250347ccc2b040799b5cc1071ed
e1ea09000eca802135e944e9fe3cfc0ebe3906850e430971c06a61b4467e844d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:08:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 17 Oct 2022 18:59:05 GMT
Expires: Mon, 24 Oct 2022 18:59:04 GMT
Etag: "8c441ff51d8b3250347ccc2b040799b5cc1071ed"
Cache-Control: max-age=506455,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75c497440d31b512-OSL
cfspart.impots.gouv.fr/templates/images/logo_impots.svg
200 OK 1.3 kB URL HTTP/1.1 cfspart.impots.gouv.fr/templates/images/logo_impots.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3344), with no line terminators
Hash 06c5a27ab846e65558b2994b38989c29
4961fc7074a2750dd4ddb0914ef9d28045cbf949
efc7ede915c6c97c167e293ae4488dcba99c37d6a4dafc4aa1ca543f0fcd0623
GET /templates/images/logo_impots.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:08:08 GMT
Server: Apache
Last-Modified: Thu, 11 Mar 2021 07:17:24 GMT
ETag: "419fd-d10-5bd3d93377dff"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx033
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 1340
Age: 2632
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
ocsp.sectigo.com/
200 OK 472 B IP
Hash 6a101fb80f342a51e31b00aab2a268f8
8c441ff51d8b3250347ccc2b040799b5cc1071ed
e1ea09000eca802135e944e9fe3cfc0ebe3906850e430971c06a61b4467e844d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:08:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 17 Oct 2022 18:59:05 GMT
Expires: Mon, 24 Oct 2022 18:59:04 GMT
Etag: "8c441ff51d8b3250347ccc2b040799b5cc1071ed"
Cache-Control: max-age=506455,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75c497440e7a0b4d-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash c9b278637bdca251f78b46e4a0850473
a48fe5095fc27af1c6b6628149d9e8f655295621
eea38f271e134a85a7b586631a8831888ab81f0edb33120b26bd35cdfa032e52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5851
Cache-Control: max-age=128168
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:08:08 GMT
Etag: "634e5e95-1d7"
Expires: Thu, 20 Oct 2022 09:44:16 GMT
Last-Modified: Tue, 18 Oct 2022 08:06:45 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
cfspart.impots.gouv.fr/templates/images/bloc-marque.svg
200 OK 5.7 kB URL HTTP/1.1 cfspart.impots.gouv.fr/templates/images/bloc-marque.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (17928), with no line terminators
Hash 542e90e968e808958f23740d028bf385
21df8fb442714890c2d45d889692e8168fa47486
c9c4a16bfc62ca1cb83c8e7704e49f1710c736bd89f54078e5304570d179aaba
GET /templates/images/bloc-marque.svg HTTP/1.1
Host: cfspart.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:08:08 GMT
Server: Apache
Last-Modified: Thu, 11 Mar 2021 07:17:24 GMT
ETag: "419fe-4608-5bd3d9338d9a7"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Via: dpapusx033
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com ; form-action 'self' ; img-src 'self' https://www.impots.gouv.fr ; upgrade-insecure-requests ;
X-Frame-Options: SAMEORIGIN
Content-Length: 5743
Age: 2632
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
www.impots.gouv.fr/portail/sites/all/themes/impotsgouv/images/favicon/favicon-152.png
301 Moved Permanently 292 B URL HTTP/2 www.impots.gouv.fr/portail/sites/all/themes/impotsgouv/images/favicon/favicon-152.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5494409c9735f834408aaf285435821b
3667f2f5c6133f02b6efb3adfd9e4b67f3aa8570
d8912f661bf750a506668f51f2763a170e94752783bfd7a5e5f1b32d1aeb25d8
GET /portail/sites/all/themes/impotsgouv/images/favicon/favicon-152.png HTTP/1.1
Host: www.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
age: 661295
cache-control: must-revalidate
content-type: text/html; charset=iso-8859-1
date: Tue, 11 Oct 2022 06:26:34 GMT
expires: Tue, 25 Oct 2022 06:26:34 GMT
location: https://www.impots.gouv.fr/sites/all/themes/impotsgouv/images/favicon/favicon-152.png
server: ECAcc (ska/F6F5)
strict-transport-security: max-age=34560000; includeSubDomains
x-content-type-options: nosniff
content-length: 292
X-Firefox-Spdy: h2
www.impots.gouv.fr/themes/custom/pus_inea/favicon.ico
200 OK 1.2 kB URL HTTP/2 www.impots.gouv.fr/themes/custom/pus_inea/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 4c2c39d7cb584994b956b7001fc462e1
82c00353c1ca67d925e65fd6022cd0ccbc0f5c3c
99af879888a29feeec095725f74e18cd070de29e7f1b4a35f20746fa45382c21
GET /themes/custom/pus_inea/favicon.ico HTTP/1.1
Host: www.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes, bytes
age: 0
cache-control: must-revalidate
content-type: image/vnd.microsoft.icon
date: Tue, 18 Oct 2022 22:08:08 GMT
expires: Thu, 1 Jan 1970 00:00:00 GMT
pragma: no-cache
server: ECAcc (ska/F7A3)
strict-transport-security: max-age=34560000; includeSubDomains
x-content-type-options: nosniff
content-length: 1150
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: B9RO/XXCm7MHBsSoNSofzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ni3Qr7Gf7IjBem4a8CVoockpRxY=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10116
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10116
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10116
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:08:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10116
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:08:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a93e847-d046-46de-bbdc-764ba175f07b.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a93e847-d046-46de-bbdc-764ba175f07b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b571387c948f6bdaa98e35bddec3f0
5142ae2e93decbc42bae5bfffd45e41c8283dc24
74b131b79c088a251e7006a8db2269befb6459b55592bf06e31947fe460e0464
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a93e847-d046-46de-bbdc-764ba175f07b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10835
x-amzn-requestid: 9ad78117-d4f5-4275-b92e-19083ce9a780
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFDpENQIAMFpGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1bb0-177e54e73ec483f87c1d248a;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: G21M4I0IvGk5RfJWltvsgJi0JN2JRQdypofdmhmUKzFgCJpznfyNbg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 1521
etag: "5142ae2e93decbc42bae5bfffd45e41c8283dc24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa93498e0-0d58-4395-9b74-9288b70d3169.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa93498e0-0d58-4395-9b74-9288b70d3169.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1afd9e3ed9813a01fc28ea84553b2675
76e1ca27983e04d48694ad21a126b0543d2e21cf
f46026e97bcafe56b19324c30ce283282f35ed448f19fef82197cd648b04b70f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa93498e0-0d58-4395-9b74-9288b70d3169.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7139
x-amzn-requestid: 7b6e9f7c-87cf-4f9b-9ee1-31374d4ecc01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aCQtHFWjoAMFmRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a6186-7c0d1ffd0b4067d936c92d56;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 07:30:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Byd1eeYrleYGMFTjfC17cqhkR6Zzd0UVTLpZJFT9KVmcMjHAnIt7Rg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:43:01 GMT
age: 1509
etag: "76e1ca27983e04d48694ad21a126b0543d2e21cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg
200 OK 35 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b683fafb36238c7da6be76247f60600b
e975f7a307a970ab45b03f861fd7d875ec66028d
b65fa7f3e7e0d999ebdfc1a4beb74e21221e4ceabd9e57ed0af6ab4560e12fdd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 35276
x-amzn-requestid: 6e8a79ad-d0f3-4290-a1ed-ef9b1239f193
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFApGzbIAMFRGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1b9d-65cf1b926ab122b1716a2983;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:17 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hPbTIgByMSbi22qlqk74Vk8h6AWf5DxSWDZHjew5y-RHl6X0uRu_wQ==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 1521
etag: "e975f7a307a970ab45b03f861fd7d875ec66028d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4f7fb1-6ff7-4200-a364-c7687de3e6cd.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4f7fb1-6ff7-4200-a364-c7687de3e6cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b73891cfdb1a7b7316613e97d6f71c8d
af847fead79d25ce1f0fdc3bb7f043e834998090
035d0c6ae1c041f1ad77becefc57685de9b039a1e15c081009ba2b5f01ddfac8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4f7fb1-6ff7-4200-a364-c7687de3e6cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10379
x-amzn-requestid: d76e8a53-63e3-492a-9480-62e767424032
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBq4HGcToAMFkYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a2500-5bf304b04114c31d15c008c4;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:12:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SJB7Qbhv21noYVMkseuzk3Yy4UnzK07DujhkiKwFf6xUxNLVCRtrRA==
via: 1.1 e943d5f0cbb0d255d29da0ddf6639ba8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 1521
etag: "af847fead79d25ce1f0fdc3bb7f043e834998090"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34233831dc5c15001753b8bcc03382b0
00790fcdc95ebb458a67c1de32fbb58039795d81
a63d7d3ff74534fa2edfef6aae76074b228fdd3966917903176d897e7ea1e1c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7749
x-amzn-requestid: 389e9ef8-8bf4-4aa4-9255-e71f64442dd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBq4FFKioAMFoOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a2500-307d1b4103e58eb400cdc6bc;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:12:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CSmVVhHYJ0HW3D61Xse0jsVoDBqKGx-scT6Vno55Ld8x3aK5gDU41w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 05:06:33 GMT
age: 61297
etag: "00790fcdc95ebb458a67c1de32fbb58039795d81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.impots.gouv.fr/sites/all/themes/impotsgouv/images/favicon/favicon-152.png
404 Not Found 10 kB URL HTTP/2 www.impots.gouv.fr/sites/all/themes/impotsgouv/images/favicon/favicon-152.png
IP
Hash 73de4ea849abc4f38ffce4c16e3a0a56
9c1ba0ad6e8035f5e475dee993e6908ce8ff4b81
2b03c611b210a2b272279d9f83bea3451c7763a70018802cfb11471bf6756437
GET /sites/all/themes/impotsgouv/images/favicon/favicon-152.png HTTP/1.1
Host: www.impots.gouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://impot-refgouv.fr/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
age: 0
cache-control: must-revalidate
content-language: fr
content-type: text/html; charset=UTF-8
date: Tue, 18 Oct 2022 22:08:08 GMT
expires: Tue, 18 Oct 2022 22:09:08 GMT
from-origin: same
permissions-policy: interest-cohort=()
server: ECAcc (ska/F737)
strict-transport-security: max-age=34560000; includeSubDomains
x-content-type-options: nosniff, nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge
x-xss-protection: 1
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/mire.css
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/mire.css
IP
ASN #16095 Sentia Denmark A/S
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/mire.css HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-ab7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/idContact.js
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/idContact.js
IP
ASN #16095 Sentia Denmark A/S
GET /Particuliers%20authentification_files/idContact.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-b4f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/auth2019v3.js
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/auth2019v3.js
IP
ASN #16095 Sentia Denmark A/S
GET /Particuliers%20authentification_files/auth2019v3.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-13192"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/jquery.details.js
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/jquery.details.js
IP
ASN #16095 Sentia Denmark A/S
GET /Particuliers%20authentification_files/jquery.details.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-7d0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/commun.css
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/commun.css
IP
ASN #16095 Sentia Denmark A/S
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/commun.css HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 16:51:36 GMT
etag: W/"62f13f18-168c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/messages.js
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/messages.js
IP
ASN #16095 Sentia Denmark A/S
GET /Particuliers%20authentification_files/messages.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-2a2f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/jquery.min.js
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/jquery.min.js
IP
ASN #16095 Sentia Denmark A/S
GET /Particuliers%20authentification_files/jquery.min.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-14e4a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification_files/bootstrap.min.js
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification_files/bootstrap.min.js
IP
ASN #16095 Sentia Denmark A/S
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification_files/bootstrap.min.js HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://impot-refgouv.fr/Particuliers%20authentification.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:08 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 16:31:48 GMT
etag: W/"62f13a74-8208"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
impot-refgouv.fr/Particuliers%20authentification.html
200 OK 0 B URL HTTP/2 impot-refgouv.fr/Particuliers%20authentification.html
IP
ASN #16095 Sentia Denmark A/S
Analyzer Verdict Alert openphish DGI (French Tax Authority)
GET /Particuliers%20authentification.html HTTP/1.1
Host: impot-refgouv.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:08:07 GMT
content-type: text/html
last-modified: Mon, 08 Aug 2022 19:44:54 GMT
etag: W/"62f167b6-fd38"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
86.48.5.49
34.117.237.239
104.18.32.68
145.242.11.27
93.184.220.29
23.36.76.226