hxxp://www[.]secuserve[.]fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail[.]html#[.]Xh7vCxfjJUN

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
08/08/2023, 13:11 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html#.Xh7vCxfjJUN

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1644	msedge.exe
1644	msedge.exe
1616	identity_helper.exe
1616	identity_helper.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 1708	1644	msedge.exe	81
PID 1644 wrote to memory of 1708	1644	msedge.exe	81
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 208	1644	msedge.exe	83
PID 1644 wrote to memory of 1692	1644	msedge.exe	82
PID 1644 wrote to memory of 1692	1644	msedge.exe	82
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84
PID 1644 wrote to memory of 2760	1644	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html#.Xh7vCxfjJUN
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff9a8e46f8,0x7fff9a8e4708,0x7fff9a8e4718
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,5784612487810146661,4875009186777010610,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5344 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4340

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1192

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:220

Network

DNS

www.secuserve.fr

msedge.exe

Remote address:

8.8.8.8:53

Request

www.secuserve.fr

IN A

Response

www.secuserve.fr

IN A

82.165.124.152
GET

http://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html

msedge.exe

Remote address:

82.165.124.152:80

Request

GET /actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html HTTP/1.1
Host: www.secuserve.fr
Connection: keep-alive
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Server: nginx
Date: Tue, 08 Aug 2023 13:11:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html
GET

https://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html HTTP/2.0
host: www.secuserve.fr
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

server: nginx
date: Tue, 08 Aug 2023 13:11:18 GMT
content-type: text/html; charset=iso-8859-1
content-length: 296
x-content-type-options: nosniff
location: https://secuserve.fr/actualites/e-securemail-v70-int%c3%a8gre-la-technologie-humail.html
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:18 GMT
x-powered-by: PleskLin
GET

https://secuserve.fr/actualites/e-securemail-v70-int%c3%a8gre-la-technologie-humail.html

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /actualites/e-securemail-v70-int%c3%a8gre-la-technologie-humail.html HTTP/2.0
host: secuserve.fr
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

server: nginx
date: Tue, 08 Aug 2023 13:11:20 GMT
content-type: text/html; charset=iso-8859-1
content-length: 243
x-content-type-options: nosniff
location: https://e-securemail.fr/blog/humail
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:20 GMT
x-powered-by: PleskLin
DNS

apps.identrust.com

msedge.exe

Remote address:

8.8.8.8:53

Request

apps.identrust.com

IN A

Response

apps.identrust.com

IN CNAME

identrust.edgesuite.net

identrust.edgesuite.net

IN CNAME

a1952.dscq.akamai.net

a1952.dscq.akamai.net

IN A

84.53.175.19

a1952.dscq.akamai.net

IN A

88.221.25.170
GET

http://apps.identrust.com/roots/dstrootcax3.p7c

msedge.exe

Remote address:

84.53.175.19:80

Request

GET /roots/dstrootcax3.p7c HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: apps.identrust.com

Response

HTTP/1.1 200 OK

X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15768000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.identrust.com
Last-Modified: Wed, 08 Feb 2023 16:52:56 GMT
ETag: "37d-5f433188daa00"
Accept-Ranges: bytes
Content-Length: 893
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Type: application/pkcs7-mime
Cache-Control: max-age=3600
Expires: Tue, 08 Aug 2023 14:11:17 GMT
Date: Tue, 08 Aug 2023 13:11:17 GMT
Connection: keep-alive
DNS

20.160.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

20.160.190.20.in-addr.arpa

IN PTR

Response
DNS

19.175.53.84.in-addr.arpa

Remote address:

8.8.8.8:53

Request

19.175.53.84.in-addr.arpa

IN PTR

Response

19.175.53.84.in-addr.arpa

IN PTR

a84-53-175-19deploystaticakamaitechnologiescom
DNS

254.128.241.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

254.128.241.8.in-addr.arpa

IN PTR

Response
DNS

152.124.165.82.in-addr.arpa

Remote address:

8.8.8.8:53

Request

152.124.165.82.in-addr.arpa

IN PTR

Response
DNS

secuserve.fr

msedge.exe

Remote address:

8.8.8.8:53

Request

secuserve.fr

IN A

Response

secuserve.fr

IN A

82.165.124.152
DNS

e-securemail.fr

msedge.exe

Remote address:

8.8.8.8:53

Request

e-securemail.fr

IN A

Response

e-securemail.fr

IN A

82.165.124.152
GET

https://e-securemail.fr/blog/humail

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /blog/humail HTTP/2.0
host: e-securemail.fr
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

server: nginx
date: Tue, 08 Aug 2023 13:11:20 GMT
content-type: text/html; charset=iso-8859-1
content-length: 244
x-content-type-options: nosniff
location: https://e-securemail.com/blog/humail
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:20 GMT
x-powered-by: PleskLin
DNS

e-securemail.com

msedge.exe

Remote address:

8.8.8.8:53

Request

e-securemail.com

IN A

Response

e-securemail.com

IN A

82.165.124.152
GET

https://e-securemail.com/blog/humail

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /blog/humail HTTP/2.0
host: e-securemail.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:20 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.21
cache-control: must-revalidate, no-cache, private
x-ua-compatible: IE=edge
content-language: fr
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: -1
x-generator: Drupal 9 (https://www.drupal.org)
pragma: no-cache
x-powered-by: PleskLin
content-encoding: br
GET

https://e-securemail.com/sites/default/files/google_tag/gtm_e_securemail/google_tag.script.js?rxxnpj

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/google_tag/gtm_e_securemail/google_tag.script.js?rxxnpj HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: application/javascript
x-content-type-options: nosniff
x-accel-version: 0.01
last-modified: Mon, 17 Jul 2023 09:00:57 GMT
etag: W/"15c-600ab09666cb4"
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
x-powered-by: PleskLin
content-encoding: br
GET

https://e-securemail.com/sites/default/files/css/css_JUEAbTlCSFwe05IFAcHX8dpM_2PervMS6l63cOTmd-A.css

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/css/css_JUEAbTlCSFwe05IFAcHX8dpM_2PervMS6l63cOTmd-A.css HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: text/css
content-length: 2741
x-content-type-options: nosniff
last-modified: Mon, 17 Jul 2023 09:01:45 GMT
etag: "ab5-600ab0c403bb2"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
content-encoding: gzip
vary: Accept-Encoding
x-powered-by: PleskLin
GET

https://e-securemail.com/sites/default/files/css/css_mngqiRAb4j8ZJUQlhqfFNxxxJGh35eSCbcn_yVUxaO0.css

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/css/css_mngqiRAb4j8ZJUQlhqfFNxxxJGh35eSCbcn_yVUxaO0.css HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: text/css
content-length: 60854
x-content-type-options: nosniff
last-modified: Mon, 17 Jul 2023 09:01:32 GMT
etag: "edb6-600ab0b78bbd5"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
content-encoding: gzip
vary: Accept-Encoding
x-powered-by: PleskLin
GET

https://e-securemail.com/sites/default/files/js/js_zW0_whhvb08RQmOKnTNskh7KnaxOfWeDSK6CgRLXy90.js

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/js/js_zW0_whhvb08RQmOKnTNskh7KnaxOfWeDSK6CgRLXy90.js HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: text/javascript
content-length: 112501
x-content-type-options: nosniff
last-modified: Mon, 17 Jul 2023 09:01:45 GMT
etag: "1b775-600ab0c41975c"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
content-encoding: gzip
vary: Accept-Encoding
x-powered-by: PleskLin
GET

https://e-securemail.com/sites/default/files/js/js_MCl11CUF5AuBC87qTQN_hFvz5Lqqf7GQLrVvYXBc4vw.js

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/js/js_MCl11CUF5AuBC87qTQN_hFvz5Lqqf7GQLrVvYXBc4vw.js HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: text/javascript
content-length: 58226
x-content-type-options: nosniff
last-modified: Mon, 17 Jul 2023 09:01:45 GMT
etag: "e372-600ab0c4227e5"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
content-encoding: gzip
vary: Accept-Encoding
x-powered-by: PleskLin
GET

https://e-securemail.com/sites/default/files/js/js_rK6rfuTde5uwsv0niFVCm7EptIupF8ft9zwbnB2HRhA.js

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/js/js_rK6rfuTde5uwsv0niFVCm7EptIupF8ft9zwbnB2HRhA.js HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: text/javascript
content-length: 2103
x-content-type-options: nosniff
last-modified: Mon, 17 Jul 2023 09:01:45 GMT
etag: "837-600ab0c423b6d"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
content-encoding: gzip
vary: Accept-Encoding
x-powered-by: PleskLin
GET

https://e-securemail.com/sites/default/files/images/logo_e-securemail.png

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/images/logo_e-securemail.png HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 10:35:47 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
etag: W/"63c91d03-81f4"
x-powered-by: PleskLin
content-encoding: br
GET

https://e-securemail.com/sites/default/files/images/offre_essai.png

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/images/offre_essai.png HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: image/png
content-length: 5998
last-modified: Tue, 16 Nov 2021 08:29:53 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
etag: "61936c01-176e"
x-powered-by: PleskLin
accept-ranges: bytes
GET

https://e-securemail.com/modules/eu_cookie_compliance/js/eu_cookie_compliance.min.js?v=9.5.2

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /modules/eu_cookie_compliance/js/eu_cookie_compliance.min.js?v=9.5.2 HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: image/png
content-length: 5261
last-modified: Tue, 16 Nov 2021 08:29:54 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
etag: "61936c02-148d"
x-powered-by: PleskLin
accept-ranges: bytes
GET

https://e-securemail.com/sites/default/files/images/langues/drapeau_anglais.png

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/images/langues/drapeau_anglais.png HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: image/png
content-length: 1890
last-modified: Tue, 16 Nov 2021 08:30:30 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
etag: "61936c26-762"
x-powered-by: PleskLin
accept-ranges: bytes
GET

https://e-securemail.com/sites/default/files/images/langues/drapeau_francais_selected.png

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/images/langues/drapeau_francais_selected.png HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: image/png
content-length: 874
x-content-type-options: nosniff
x-accel-version: 0.01
last-modified: Tue, 16 Nov 2021 08:30:30 GMT
etag: "36a-5d0e3bcf96d5d"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
x-powered-by: PleskLin
GET

https://e-securemail.com/themes/thesaas/fonts/fontawesome-webfont.woff2?v=4.7.0

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /themes/thesaas/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://e-securemail.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://e-securemail.com/sites/default/files/css/css_mngqiRAb4j8ZJUQlhqfFNxxxJGh35eSCbcn_yVUxaO0.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: font/woff2
content-length: 77160
last-modified: Tue, 16 Nov 2021 01:53:05 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
etag: "61930f01-12d68"
x-powered-by: PleskLin
accept-ranges: bytes
GET

https://e-securemail.com/sites/default/files/images/demo/demo-e-securemail-v7.mp4

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/images/demo/demo-e-securemail-v7.mp4 HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: video
referer: https://e-securemail.com/blog/humail
accept-language: en-US,en;q=0.9
range: bytes=0-

Response

HTTP/2.0 206

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: video/mp4
content-length: 7103535
last-modified: Tue, 16 Nov 2021 08:30:22 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
etag: "61936c1e-6c642f"
x-powered-by: PleskLin
content-range: bytes 0-7103534/7103535
GET

https://e-securemail.com/blog/humail

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /blog/humail HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: image/svg+xml
content-length: 513
x-content-type-options: nosniff
x-accel-version: 0.01
last-modified: Wed, 18 Jan 2023 18:22:54 GMT
etag: "201-5f28de7a1bb80"
accept-ranges: bytes
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:21 GMT
x-powered-by: PleskLin
GET

https://e-securemail.com/core/misc/icons/ee0000/required.svg

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /core/misc/icons/ee0000/required.svg HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/sites/default/files/css/css_mngqiRAb4j8ZJUQlhqfFNxxxJGh35eSCbcn_yVUxaO0.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:22 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.21
cache-control: must-revalidate, no-cache, private
x-ua-compatible: IE=edge
content-language: fr
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: -1
x-generator: Drupal 9 (https://www.drupal.org)
pragma: no-cache
x-powered-by: PleskLin
content-encoding: br
POST

https://e-securemail.com/core/modules/statistics/statistics.php

msedge.exe

Remote address:

82.165.124.152:443

Request

POST /core/modules/statistics/statistics.php HTTP/2.0
host: e-securemail.com
content-length: 7
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
accept: */*
dnt: 1
x-requested-with: XMLHttpRequest
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: application/x-www-form-urlencoded; charset=UTF-8
origin: https://e-securemail.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:22 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.21
x-content-type-options: nosniff
x-powered-by: PleskLin
content-encoding: br
GET

https://e-securemail.com/sites/default/files/favicon.png

msedge.exe

Remote address:

82.165.124.152:443

Request

GET /sites/default/files/favicon.png HTTP/2.0
host: e-securemail.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://e-securemail.com/blog/humail
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _gcl_au=1.1.1813293628.1691500281
cookie: _gid=GA1.2.342402435.1691500281
cookie: _gat_gtag_UA_180628328_3=1
cookie: _ga_ZBPQ5M9F61=GS1.1.1691500281.1.0.1691500281.60.0.0
cookie: _ga=GA1.1.2107129492.1691500281
cookie: _ga_PN1Z321L66=GS1.1.1691500281.1.0.1691500281.60.0.0

Response

HTTP/2.0 200

server: nginx
date: Tue, 08 Aug 2023 13:11:23 GMT
content-type: image/png
content-length: 14521
last-modified: Tue, 16 Nov 2021 08:29:34 GMT
cache-control: max-age=1209600
expires: Tue, 22 Aug 2023 13:11:23 GMT
etag: "61936bee-38b9"
x-powered-by: PleskLin
accept-ranges: bytes
DNS

maxcdn.bootstrapcdn.com

msedge.exe

Remote address:

8.8.8.8:53

Request

maxcdn.bootstrapcdn.com

IN A

Response

maxcdn.bootstrapcdn.com

IN A

104.18.11.207

maxcdn.bootstrapcdn.com

IN A

104.18.10.207
DNS

cdn.jsdelivr.net

msedge.exe

Remote address:

8.8.8.8:53

Request

cdn.jsdelivr.net

IN A

Response

cdn.jsdelivr.net

IN CNAME

jsdelivr.map.fastly.net

jsdelivr.map.fastly.net

IN A

151.101.1.229

jsdelivr.map.fastly.net

IN A

151.101.65.229

jsdelivr.map.fastly.net

IN A

151.101.129.229

jsdelivr.map.fastly.net

IN A

151.101.193.229
GET

https://cdn.jsdelivr.net/npm/bootstrap@3.4.1/dist/css/bootstrap.min.css

msedge.exe

Remote address:

151.101.1.229:443

Request

GET /npm/bootstrap@3.4.1/dist/css/bootstrap.min.css HTTP/2.0
host: cdn.jsdelivr.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://e-securemail.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: style
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.4.1
x-jsd-version-type: version
etag: W/"1da71-sJcv3M6C/Vg9TCzMPy4990BKGdA"
content-encoding: br
accept-ranges: bytes
date: Tue, 08 Aug 2023 13:11:21 GMT
age: 9724804
x-served-by: cache-fra-eddf8230115-FRA, cache-ams21082-AMS
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21308
GET

https://cdn.jsdelivr.net/npm/@unicorn-fail/drupal-bootstrap-styles@0.0.2/dist/3.4.0/8.x-3.x/drupal-bootstrap.min.css

msedge.exe

Remote address:

151.101.1.229:443

Request

GET /npm/@unicorn-fail/drupal-bootstrap-styles@0.0.2/dist/3.4.0/8.x-3.x/drupal-bootstrap.min.css HTTP/2.0
host: cdn.jsdelivr.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://e-securemail.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: style
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 0.0.2
x-jsd-version-type: version
etag: W/"2ba9-7BZ4Wjo4JdjHlvh1wHU1MeucYhU"
content-encoding: br
accept-ranges: bytes
date: Tue, 08 Aug 2023 13:11:21 GMT
age: 9636947
x-served-by: cache-fra-eddf8230038-FRA, cache-ams21082-AMS
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3566
GET

https://cdn.jsdelivr.net/npm/bootstrap@3.4.1/dist/js/bootstrap.min.js

msedge.exe

Remote address:

151.101.1.229:443

Request

GET /npm/bootstrap@3.4.1/dist/js/bootstrap.min.js HTTP/2.0
host: cdn.jsdelivr.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://e-securemail.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.4.1
x-jsd-version-type: version
etag: W/"9b00-sW/YImvWv7COVo8bHQoh1gJHzvs"
content-encoding: br
accept-ranges: bytes
date: Tue, 08 Aug 2023 13:11:21 GMT
age: 12615097
x-served-by: cache-fra-eddf8230057-FRA, cache-ams21082-AMS
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11647
GET

https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css

msedge.exe

Remote address:

104.18.11.207:443

Request

GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/2.0
host: maxcdn.bootstrapcdn.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 08 Aug 2023 13:11:21 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 601
cdn-edgestorageid: 617
cdn-edgestorageid: 617
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-08-02 19:09:15
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: a20f8f9fd039c143ec88748f1e9f7c9f
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 9744798
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f380135fe7db7f7-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

229.1.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

229.1.101.151.in-addr.arpa

IN PTR

Response
DNS

200.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.179.250.142.in-addr.arpa

IN PTR

Response

200.179.250.142.in-addr.arpa

IN PTR

ams15s42-in-f81e100net
DNS

207.11.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

207.11.18.104.in-addr.arpa

IN PTR

Response
DNS

106.208.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

106.208.58.216.in-addr.arpa

IN PTR

Response

106.208.58.216.in-addr.arpa

IN PTR

sof01s11-in-f1061e100net

106.208.58.216.in-addr.arpa

IN PTR

ams17s08-in-f10�J
DNS

226.20.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.20.18.104.in-addr.arpa

IN PTR

Response
DNS

131.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.179.250.142.in-addr.arpa

IN PTR

Response

131.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f31e100net
DNS

206.23.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.217.172.in-addr.arpa

IN PTR

Response

206.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f2061e100net

206.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f14�J

206.23.217.172.in-addr.arpa

IN PTR

ams16s37-in-f14�J
DNS

analytics.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

analytics.google.com

IN A

Response

analytics.google.com

IN CNAME

analytics-alv.google.com

analytics-alv.google.com

IN A

216.239.36.181

analytics-alv.google.com

IN A

216.239.32.181

analytics-alv.google.com

IN A

216.239.34.181

analytics-alv.google.com

IN A

216.239.38.181
POST

https://analytics.google.com/g/collect?v=2&tid=G-ZBPQ5M9F61&_ono=1&gtm=45je3820&_p=351012602&_gaz=1&gdid=dMDhkMT&cid=2107129492.1691500281&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_eu=AAAI&_s=1&sid=1691500281&sct=1&seg=0&dl=https%3A%2F%2Fe-securemail.com%2Fblog%2Fhumail&dt=e-securemail%20V7%2C%20int%C3%A8gre%20la%20technologie%20HUMail%20%7C%20E-securemail&en=page_view&_fv=1&_ss=1&ep.anonymize_ip=true&ep.page_placeholder=PLACEHOLDER_page_path&up._npa=1

msedge.exe

Remote address:

216.239.36.181:443

Request

POST /g/collect?v=2&tid=G-ZBPQ5M9F61&_ono=1&gtm=45je3820&_p=351012602&_gaz=1&gdid=dMDhkMT&cid=2107129492.1691500281&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_eu=AAAI&_s=1&sid=1691500281&sct=1&seg=0&dl=https%3A%2F%2Fe-securemail.com%2Fblog%2Fhumail&dt=e-securemail%20V7%2C%20int%C3%A8gre%20la%20technologie%20HUMail%20%7C%20E-securemail&en=page_view&_fv=1&_ss=1&ep.anonymize_ip=true&ep.page_placeholder=PLACEHOLDER_page_path&up._npa=1 HTTP/2.0
host: analytics.google.com
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://e-securemail.com
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

stats.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

stats.g.doubleclick.net

IN A

Response

stats.g.doubleclick.net

IN A

142.250.102.155

stats.g.doubleclick.net

IN A

142.250.102.157

stats.g.doubleclick.net

IN A

142.250.102.156

stats.g.doubleclick.net

IN A

142.250.102.154
POST

https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-180628328-3&cid=2107129492.1691500281&jid=2105829866&gjid=1610695186&_gid=342402435.1691500281&npa=1&_u=YGBACUAABAAAACAAI~&z=527200006

msedge.exe

Remote address:

142.250.102.155:443

Request

POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-180628328-3&cid=2107129492.1691500281&jid=2105829866&gjid=1610695186&_gid=342402435.1691500281&npa=1&_u=YGBACUAABAAAACAAI~&z=527200006 HTTP/2.0
host: stats.g.doubleclick.net
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
accept: */*
origin: https://e-securemail.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://stats.g.doubleclick.net/g/collect?v=2&_ono=1&tid=G-ZBPQ5M9F61&cid=2107129492.1691500281&gtm=45je3820&aip=1

msedge.exe

Remote address:

142.250.102.155:443

Request

POST /g/collect?v=2&_ono=1&tid=G-ZBPQ5M9F61&cid=2107129492.1691500281&gtm=45je3820&aip=1 HTTP/2.0
host: stats.g.doubleclick.net
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://e-securemail.com
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://stats.g.doubleclick.net/g/collect?v=2&tid=G-PN1Z321L66&cid=2107129492.1691500281&gtm=45je3820&aip=1

msedge.exe

Remote address:

142.250.102.155:443

Request

POST /g/collect?v=2&tid=G-PN1Z321L66&cid=2107129492.1691500281&gtm=45je3820&aip=1 HTTP/2.0
host: stats.g.doubleclick.net
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://e-securemail.com
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://e-securemail.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

181.36.239.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

181.36.239.216.in-addr.arpa

IN PTR

Response
DNS

155.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

155.102.250.142.in-addr.arpa

IN PTR

Response

155.102.250.142.in-addr.arpa

IN PTR

rb-in-f1551e100net
DNS

196.168.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

196.168.217.172.in-addr.arpa

IN PTR

Response

196.168.217.172.in-addr.arpa

IN PTR

ams16s32-in-f41e100net
DNS

146.78.124.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

146.78.124.51.in-addr.arpa

IN PTR

Response
DNS

158.240.127.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

158.240.127.40.in-addr.arpa

IN PTR

Response
DNS

26.165.165.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.165.165.52.in-addr.arpa

IN PTR

Response
DNS

206.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.85.13.in-addr.arpa

IN PTR

Response
DNS

2.77.109.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

2.77.109.52.in-addr.arpa

IN PTR

Response
DNS

199.111.78.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

199.111.78.13.in-addr.arpa

IN PTR

Response

82.165.124.152:80

http://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html

http

msedge.exe

837 B
686 B
7
6

HTTP Request

GET http://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html

HTTP Response

301
82.165.124.152:80

www.secuserve.fr

msedge.exe

236 B
184 B
5
4
82.165.124.152:443

https://secuserve.fr/actualites/e-securemail-v70-int%c3%a8gre-la-technologie-humail.html

tls, http2

msedge.exe

2.1kB
7.1kB
18
20

HTTP Request

GET https://www.secuserve.fr/actualites/e-securemail-v70-int%C3%A8gre-la-technologie-humail.html

HTTP Response

301

HTTP Request

GET https://secuserve.fr/actualites/e-securemail-v70-int%c3%a8gre-la-technologie-humail.html

HTTP Response

301
84.53.175.19:80

http://apps.identrust.com/roots/dstrootcax3.p7c

http

msedge.exe

416 B
1.7kB
6
5

HTTP Request

GET http://apps.identrust.com/roots/dstrootcax3.p7c

HTTP Response

200
82.165.124.152:443

https://e-securemail.fr/blog/humail

tls, http2

msedge.exe

1.9kB
6.5kB
15
17

HTTP Request

GET https://e-securemail.fr/blog/humail

HTTP Response

301
82.165.124.152:443

https://e-securemail.com/sites/default/files/favicon.png

tls, http2

msedge.exe

121.4kB
6.9MB
2568
4938

HTTP Request

GET https://e-securemail.com/blog/humail

HTTP Response

200

HTTP Request

GET https://e-securemail.com/sites/default/files/google_tag/gtm_e_securemail/google_tag.script.js?rxxnpj

HTTP Request

GET https://e-securemail.com/sites/default/files/css/css_JUEAbTlCSFwe05IFAcHX8dpM_2PervMS6l63cOTmd-A.css

HTTP Request

GET https://e-securemail.com/sites/default/files/css/css_mngqiRAb4j8ZJUQlhqfFNxxxJGh35eSCbcn_yVUxaO0.css

HTTP Request

GET https://e-securemail.com/sites/default/files/js/js_zW0_whhvb08RQmOKnTNskh7KnaxOfWeDSK6CgRLXy90.js

HTTP Request

GET https://e-securemail.com/sites/default/files/js/js_MCl11CUF5AuBC87qTQN_hFvz5Lqqf7GQLrVvYXBc4vw.js

HTTP Request

GET https://e-securemail.com/sites/default/files/js/js_rK6rfuTde5uwsv0niFVCm7EptIupF8ft9zwbnB2HRhA.js

HTTP Request

GET https://e-securemail.com/sites/default/files/images/logo_e-securemail.png

HTTP Request

GET https://e-securemail.com/sites/default/files/images/offre_essai.png

HTTP Request

GET https://e-securemail.com/modules/eu_cookie_compliance/js/eu_cookie_compliance.min.js?v=9.5.2

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://e-securemail.com/sites/default/files/images/langues/drapeau_anglais.png

HTTP Request

GET https://e-securemail.com/sites/default/files/images/langues/drapeau_francais_selected.png

HTTP Request

GET https://e-securemail.com/themes/thesaas/fonts/fontawesome-webfont.woff2?v=4.7.0

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://e-securemail.com/sites/default/files/images/demo/demo-e-securemail-v7.mp4

HTTP Response

206

HTTP Request

GET https://e-securemail.com/blog/humail

HTTP Request

GET https://e-securemail.com/core/misc/icons/ee0000/required.svg

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://e-securemail.com/core/modules/statistics/statistics.php

HTTP Response

200

HTTP Request

GET https://e-securemail.com/sites/default/files/favicon.png

HTTP Response

200
151.101.1.229:443

https://cdn.jsdelivr.net/npm/bootstrap@3.4.1/dist/js/bootstrap.min.js

tls, http2

msedge.exe

2.6kB
46.0kB
29
46

HTTP Request

GET https://cdn.jsdelivr.net/npm/bootstrap@3.4.1/dist/css/bootstrap.min.css

HTTP Request

GET https://cdn.jsdelivr.net/npm/@unicorn-fail/drupal-bootstrap-styles@0.0.2/dist/3.4.0/8.x-3.x/drupal-bootstrap.min.css

HTTP Request

GET https://cdn.jsdelivr.net/npm/bootstrap@3.4.1/dist/js/bootstrap.min.js

HTTP Response

200

HTTP Response

200

HTTP Response

200
104.18.11.207:443

https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css

tls, http2

msedge.exe

1.8kB
9.1kB
15
18

HTTP Request

GET https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css

HTTP Response

200
151.101.1.229:443

cdn.jsdelivr.net

tls

msedge.exe

885 B
5.3kB
8
7
151.101.1.229:443

cdn.jsdelivr.net

tls

msedge.exe

977 B
5.4kB
10
9
216.239.36.181:443

https://analytics.google.com/g/collect?v=2&tid=G-ZBPQ5M9F61&_ono=1&gtm=45je3820&_p=351012602&_gaz=1&gdid=dMDhkMT&cid=2107129492.1691500281&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_eu=AAAI&_s=1&sid=1691500281&sct=1&seg=0&dl=https%3A%2F%2Fe-securemail.com%2Fblog%2Fhumail&dt=e-securemail%20V7%2C%20int%C3%A8gre%20la%20technologie%20HUMail%20%7C%20E-securemail&en=page_view&_fv=1&_ss=1&ep.anonymize_ip=true&ep.page_placeholder=PLACEHOLDER_page_path&up._npa=1

tls, http2

msedge.exe

2.2kB
8.9kB
15
16

HTTP Request

POST https://analytics.google.com/g/collect?v=2&tid=G-ZBPQ5M9F61&_ono=1&gtm=45je3820&_p=351012602&_gaz=1&gdid=dMDhkMT&cid=2107129492.1691500281&ul=en-us&sr=1280x720&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&_eu=AAAI&_s=1&sid=1691500281&sct=1&seg=0&dl=https%3A%2F%2Fe-securemail.com%2Fblog%2Fhumail&dt=e-securemail%20V7%2C%20int%C3%A8gre%20la%20technologie%20HUMail%20%7C%20E-securemail&en=page_view&_fv=1&_ss=1&ep.anonymize_ip=true&ep.page_placeholder=PLACEHOLDER_page_path&up._npa=1
142.250.102.155:443

stats.g.doubleclick.net

tls, http2

msedge.exe

999 B
6.0kB
9
8
142.250.102.155:443

https://stats.g.doubleclick.net/g/collect?v=2&tid=G-PN1Z321L66&cid=2107129492.1691500281&gtm=45je3820&aip=1

tls, http2

msedge.exe

2.3kB
7.2kB
18
20

HTTP Request

POST https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-180628328-3&cid=2107129492.1691500281&jid=2105829866&gjid=1610695186&_gid=342402435.1691500281&npa=1&_u=YGBACUAABAAAACAAI~&z=527200006

HTTP Request

POST https://stats.g.doubleclick.net/g/collect?v=2&_ono=1&tid=G-ZBPQ5M9F61&cid=2107129492.1691500281&gtm=45je3820&aip=1

HTTP Request

POST https://stats.g.doubleclick.net/g/collect?v=2&tid=G-PN1Z321L66&cid=2107129492.1691500281&gtm=45je3820&aip=1
142.250.102.155:443

stats.g.doubleclick.net

tls, http2

msedge.exe

999 B
6.0kB
9
8

8.8.8.8:53

www.secuserve.fr

dns

msedge.exe

62 B
78 B
1
1

DNS Request

www.secuserve.fr

DNS Response

82.165.124.152
8.8.8.8:53

apps.identrust.com

dns

msedge.exe

64 B
165 B
1
1

DNS Request

apps.identrust.com

DNS Response

84.53.175.19

88.221.25.170
8.8.8.8:53

20.160.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

20.160.190.20.in-addr.arpa
8.8.8.8:53

19.175.53.84.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

19.175.53.84.in-addr.arpa
8.8.8.8:53

254.128.241.8.in-addr.arpa

dns

72 B
126 B
1
1

DNS Request

254.128.241.8.in-addr.arpa
8.8.8.8:53

152.124.165.82.in-addr.arpa

dns

73 B
138 B
1
1

DNS Request

152.124.165.82.in-addr.arpa
8.8.8.8:53

secuserve.fr

dns

msedge.exe

58 B
74 B
1
1

DNS Request

secuserve.fr

DNS Response

82.165.124.152
8.8.8.8:53

e-securemail.fr

dns

msedge.exe

61 B
77 B
1
1

DNS Request

e-securemail.fr

DNS Response

82.165.124.152
8.8.8.8:53

e-securemail.com

dns

msedge.exe

62 B
78 B
1
1

DNS Request

e-securemail.com

DNS Response

82.165.124.152
8.8.8.8:53

maxcdn.bootstrapcdn.com

dns

msedge.exe

69 B
101 B
1
1

DNS Request

maxcdn.bootstrapcdn.com

DNS Response

104.18.11.207

104.18.10.207
8.8.8.8:53

cdn.jsdelivr.net

dns

msedge.exe

62 B
160 B
1
1

DNS Request

cdn.jsdelivr.net

DNS Response

151.101.1.229

151.101.65.229

151.101.129.229

151.101.193.229
8.8.8.8:53

229.1.101.151.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

229.1.101.151.in-addr.arpa
8.8.8.8:53

200.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

200.179.250.142.in-addr.arpa
8.8.8.8:53

207.11.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

207.11.18.104.in-addr.arpa
8.8.8.8:53

106.208.58.216.in-addr.arpa

dns

73 B
143 B
1
1

DNS Request

106.208.58.216.in-addr.arpa
8.8.8.8:53

226.20.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

226.20.18.104.in-addr.arpa
8.8.8.8:53

131.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

131.179.250.142.in-addr.arpa
8.8.8.8:53

206.23.217.172.in-addr.arpa

dns

73 B
173 B
1
1

DNS Request

206.23.217.172.in-addr.arpa
8.8.8.8:53

analytics.google.com

dns

msedge.exe

66 B
158 B
1
1

DNS Request

analytics.google.com

DNS Response

216.239.36.181

216.239.32.181

216.239.34.181

216.239.38.181
216.239.36.181:443

analytics.google.com

https

msedge.exe

4.0kB
7.7kB
9
12
8.8.8.8:53

stats.g.doubleclick.net

dns

msedge.exe

69 B
133 B
1
1

DNS Request

stats.g.doubleclick.net

DNS Response

142.250.102.155

142.250.102.157

142.250.102.156

142.250.102.154
224.0.0.251:5353

msedge.exe

531 B
8
8.8.8.8:53

181.36.239.216.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

181.36.239.216.in-addr.arpa
8.8.8.8:53

155.102.250.142.in-addr.arpa

dns

74 B
108 B
1
1

DNS Request

155.102.250.142.in-addr.arpa
8.8.8.8:53

196.168.217.172.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

196.168.217.172.in-addr.arpa
8.8.8.8:53

146.78.124.51.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

146.78.124.51.in-addr.arpa
8.8.8.8:53

158.240.127.40.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

158.240.127.40.in-addr.arpa
8.8.8.8:53

26.165.165.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

26.165.165.52.in-addr.arpa
8.8.8.8:53

206.23.85.13.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

206.23.85.13.in-addr.arpa
8.8.8.8:53

2.77.109.52.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

2.77.109.52.in-addr.arpa
8.8.8.8:53

199.111.78.13.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

199.111.78.13.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8411007bafe7b1182af1ad3a1809b4f8

SHA1
4a78ee0762aadd53accae8bb211b8b18dc602070

SHA256
1f274d0d144942d00e43fb94f9c27fc91c68dce50cd374ac6be4472b08215ca3

SHA512
909e2e33b7614cb8bbd14e0dfff1b7f98f4abbf735f88292546ce3bfa665e4cb5ee4418561004e56afc5dd30d21483b05f6358dad5624c0dc3ab1ba9a3be18eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
e06c8c722b7463ec9db7563838fcf51f

SHA1
502600a741ec33795cd8a1fc41e94bd39bf2bbdf

SHA256
92ccf401947058f7c22203ab2eb4ee2ddc6d82350f14abae138600650593e77d

SHA512
61de1cd85d0c16f7943765f166ce0d9fc41c7c1f1483f1e22177bf7401b10ace3c3a3ea7698e0adc0b2d5b6c38b87d5a71d5a72078b7762f6cbd44b25622cbdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b090c0421fa15d889fb35bc07cc30e5d

SHA1
8878fa705ad9a84fbd44cb147cfdb2ead3a22e31

SHA256
227de84e93b55a09393f31594cb5bf7ca07f1c926f366c236a9a7eddb506baba

SHA512
7b4d5a5fdd80e27b66ed497c96f71f011e6e8fe8a65f70b1877183bcdd119ecf20a541fbbff2c01b040a88dc53cd10707ebde249701b9acff00bd5206440f858

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0e8c367fe47cd81d511d6c0447ea9990

SHA1
58ecdb8c88a4dac5b2b13de254d4c1a11e1cbc53

SHA256
4e9444003d8b0bca8819f326f409ac82db7d883e0e5a1299a2c64f3e493124fc

SHA512
acc97ba309675a25a1f5340f4b1bb97f37261161f21b4088821f3883a37895c6bc1856a3b4b79ac34a151ba1fa22071a188ea447b287d940994e741b8a3faf45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
911274c63c860a8b5fee39543a282da7

SHA1
53c8839249c17b44b86b4b5e3f397f9942c11d16

SHA256
dce0b7e6512b896cefa58a85eb438c7274d2f29098bc88d2546aa3e0eaefea38

SHA512
c00500494fec75ff2e6bba01172692b41d8c213d9475f8c539bfd4348906059c9ae1282454a372014bfa33e3b60f5dea9c88b63f227908ae3bfa64adec50304a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
8caf4d73cc5a7d5e3fb3f9f1a9d4a0cc

SHA1
83f8586805286b716c70ddd14a2b7ec6a4d9d0fe

SHA256
0e0c905b688340512e84db6cf8af6dbdfe29195fefde15bd02e4917a2c5fda8c

SHA512
084ef25ea21ee1083735c61b758281ba84b607e42d0186c35c3700b24a176ada47bf2e76ed7dadd3846f2b458c977e83835ced01cda47cdd7ab2d00e5a1a294e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
673675827445d233778294c188f54839

SHA1
57bde75aed855a9230f66dd3ea43431ceb53326b

SHA256
27ddac7d0838595cb7ddfbaffb4f6f0a22d2c0a76f560ec9cce56a4c9e99e52b

SHA512
31aa7a36c208584c0538bdb1d32b032a30447e04f60c550755f940ede8c82d3f94a3d408a36447cdcbc4ad71c17f0a8407ec24a36253576eb5490d6437819f24

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request