Domain > proxyws.hgregoire.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-12-18	13.226.204.32 (ClassC)
2019-12-18	13.226.204.60 (ClassC)
2020-02-13	13.227.43.90 (ClassC)
2020-02-13	13.227.43.13 (ClassC)
2021-10-16	13.227.40.74 (ClassC)
2024-12-25	18.65.229.2 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Wed, 25 Dec 2024 07:13:01 GMTServer: ApacheVary: Accept-EncodingX-Cache: Miss from cloudfrontVia: 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SEA73-P1X-Amz-Cf-Id: zSsJmuH-bQJTPkuOFctijk4h_-rPz476qxnwwwPJmnLQ_RDpV5ajRA

!doctype html>html langen>head>  meta charsetutf-8>  link relstylesheet hrefhttps://cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css integritysha384-B0vP5xmATw1+K9KRQjQERJvTumQW0nPEzvF6L/Z6nronJ3oUOFUFpCjEUQouq2+l crossoriginanonymous>  script srchttps://code.jquery.com/jquery-3.5.1.slim.min.js integritysha384-DfXdz2htPH0lsSSs5nCTpuj/zy4C+OGpamoFVy38MVBnE+IbbVYUew+OrCXaRkfj crossoriginanonymous>/script>  script srchttps://cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js integritysha384-Piv4xVNRyMGpqkS2by6br4gNJ7DXjqk09RmUpJ8jgGtD7zP9yug3goQfGII0yAns crossoriginanonymous>/script>  script srcnode_modules/url-polyfill/url-polyfill.js crossoriginanonymous>/script>  link relstylesheet hrefhttps://cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css>  link relstylesheet hrefnode_modules/nprogress/nprogress.css/>  meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno>  script typeapplication/json data-typeApplication>    {    name: WebExtension}  /script>  style>    .logo {      background: url(/images/hgregoire-logo.svg);      width: 173px;      height: 25px;      margin: auto;      margin-bottom: 30px;    }    .logoContainer {      background-color: #18A857;      height: 45px;      padding: 10px;      margin-bottom: 5px;     }    .actions {      margin-top: 40px;    }    /* enable absolute positioning */    .inner-addon {        position: relative;    }    /* style icon */    .inner-addon .glyphicon {        position: absolute;        padding: 10px;        pointer-events: none;    }    /* align icon */    .left-addon .glyphicon  { left:  0px;}    .right-addon .glyphicon { right: 0px;}    /* add padding  */    .left-addon input  { padding-left:  30px; }    .right-addon input { padding-right: 30px; }    .gear {        -webkit-animation: rotation 2s infinite linear;        -moz-animation: rotation 2s infinite linear;        -o-animation: rotation 2s infinite linear;        animation: rotation 2s infinite linear;        transform-origin: 50% 50%;        -webkit-transform-origin: 50% 50%;        -moz-transform-origin: 50% 50%;    }    @-webkit-keyframes rotation {        from {-webkit-transform: rotate(0deg);}        to   {-webkit-transform: rotate(359deg);}    }    @-moz-keyframes rotation {        from {-moz-transform: rotate(0deg);}        to   {-moz-transform: rotate(359deg);}    }    @-o-keyframes rotation {        from {-o-transform: rotate(0deg);}        to   {-o-transform: rotate(359deg);}    }    @keyframes rotation {        from {transform: rotate(0deg);}        to   {transform: rotate(359deg);}    }    #nprogress .bar {        height: 5px;        background-color: #ff0;    }    #nprogress .peg {        display: none;    }    .separator {        display: flex;        align-items: center;        text-align: center;        color: #555;    }    .separator::before,    .separator::after {        content: ;        flex: 1;        border-bottom: 1px solid #555;        font-weight: bold;    }    .separator:not(:empty)::before {        margin-right: .50em;    }    .separator:not(:empty)::after {        margin-left: .50em;    }    .fr spanid^not_signed_:before {        content: Connexion avec Google;        padding-left: 18px;        padding-right:100px;    }  /style>/head>body classen>  div idlogin>    div classlogoContainer>      h3 classtext-center text-info logo>/h3>    /div>    div classcontainer>      div idlogin-row classrow justify-content-center align-items-center>                div idlogin-column classcol-md-6>          div classtext-right mb-1>            a hrefhttps://webservice.hgregoire.com/?languagefr>Français/a>                      /div>          div idlogin-box classcard>                          div classcard-header text-center>                h4>Web Extension (Default App)/h4>              /div>                                      div classcard-body>                div classerror alert alert-danger rolealert>                  Application disabled.                /div>                p classtext-center>Look like you are using an old Web Extension./p>p classtext-center>a classbtn btn-primary hrefhttps://webextension.hgregoire.com/>Download latest version/a>/p>                p classtext-center>a hrefmailto:support@hgregoire.com classbtn btn-link>Support/a>/p>              /div>                      /div>        /div>              /div>    /div>  /div>  form action idfrmTokenPostback methodpost styledisplay: none>    input nametoken typehidden>    input nameurl typehidden>    input namesubmitBtn typesubmit>  /form>  iframe namesignOutFrame styledisplay: none;>/iframe>  !--  div idnprogress>    div classbar rolebar styletransform: translate3d(-87.0538%, 0px, 0px); transition: all 200ms ease 0s;>      div classpeg>/div>    /div>    div classspinner rolespinner>      div classspinner-icon>/div>    /div>  /div>  -->  script srchttps://code.jquery.com/jquery-3.3.1.min.js integritysha384-tsQFqpEReu7ZLhBV2VZlAu7zcOV+rXbYlF2cqB8txI/8aZajjp4Bqd+V6D5IgvKT crossoriginanonymous>/script>  script srchttps://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js integritysha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49 crossoriginanonymous>/script>  script srchttps://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js integritysha384-ChfqqxuZUCnJSK3+MXmPNIyE6ZbWh2IMqE241rYiqJxyMiZ6OW/JmZQ5stwEULTy crossoriginanonymous>/script>  script>    (function($) {      function HGregoireAuth() {        this.googleOptions  {          client_id: 421747974978-611idcjrv429u3gqp1966ukorjlkeig6.apps.googleusercontent.com        };      }      $.extend(HGregoireAuth.prototype, {        init: function() {          this.application  JSON.parse($(scriptdata-typeApplication).text());          $(#signout).on(click, $.proxy(this.signout, this));          $(#login-form).on(submit, $.proxy(this.onFormSubmit, this));          this.errorTimer  null;          gapi.load(auth2, $.proxy(this.onGoogleAuth2Ready, this));          document.dispatchEvent(new CustomEvent(WebExtensionAuth, { bubbles: false, detail: { event: init } }));        },        onGoogleAuth2Ready: function() {          gapi.auth2.init(this.googleOptions);          gapi.signin2.render(myGoogle, {            scope: email,            onsuccess: $.proxy(this.onGoogleSignIn, this),            theme: dark,            width: 240,            height: 40,            longtitle: true,            prompt: select_account          });          gapi.auth2.getAuthInstance().then($.proxy(this.onAuth2Instance, this));        },        onAuth2Instance: function() {          if (getUrlParameter(logout)) {            this.signout();          }        },        onGoogleSignIn: function (googleUser) {          if (getUrlParameter(logout))            return ;          NProgress.start();          this.lockForm();          $(input).prop(disabled, true);          $.post({            url: /authentication/google/oauth2,            data: {              idtoken: googleUser.getAuthResponse().id_token,              application: this.application.name            },          }).done($.proxy(this.onServerSuccess, this))            .fail($.proxy(this.onServerFail, this));        },        signout: function() {          NProgress.start();          this.useIFrame  true;          $.post({            url: /authentication/signOut,          }).done($.proxy(this.onServerSuccess, this))            .fail($.proxy(this.onServerFail, this));          gapi.auth2.getAuthInstance().signOut().then(function () {            console.log(User signed out from Google.);          });        },        crossDomainPostToken: function (response) {          // construct a form with hidden inputs, targeting the iframe          var form  document.createElement(form);          form.action  response.application.urlTokenHandler;          form.method  POST;          var inputToken  document.createElement(input);          inputToken.type  hidden;          inputToken.name  token;          inputToken.value  responseaccess_token;          form.appendChild(inputToken);          var inputUrl  document.createElement(input);          inputUrl.type  hidden;          inputUrl.name  url;          inputUrl.value  document.location;          form.appendChild(inputUrl);          document.body.appendChild(form);          form.submit();        },        onServerSuccess: function (response) {          if (responseaccess_token && response.application.urlTokenHandler) {            this.crossDomainPostToken(response);          }          try {            document.dispatchEvent(new CustomEvent(WebExtensionAuth, {bubbles: false, detail: {event: update}}));          } catch(e) {            console.log(e.message);          }          if (getUrlParameter(logout)) {            var url  new URL(document.location);            var params  new URLSearchParams(url.search);            params.delete(logout);            url.search  params;            document.location.replace(url.toString());          }          this.useIFrame  false;        },        onServerFail: function (response) {          console.log(response);          NProgress.done();          this.unlockForm();          gapi.auth2.getAuthInstance().signOut();          this.showError(            response.responseJSON.simpleClass,            response.responseJSON.message          );        },        showError: function(exception, message) {          regException  exception.escapeRegex();          var $div  $(data-exception + regException + );          if (!$div.length) {            $div  $(data-exceptionException);          }          if (exception  InvalidAuthenticationButGoogleAccountExistsException) {            $(#myGoogle).fadeOut(300).fadeIn(300).fadeOut(300).fadeIn(300).fadeOut(300).fadeIn(300);          }          $div.slideDown(500).find(.message).text(exception + : + message);          if (this.errorTimer ! null)            clearTimeout(this.errorTimer);          this.errorTimer  setTimeout($.proxy(this.hideError, this), 5000);        },        hideError: function() {          $(.error).slideUp(500);          this.errorTimer  null;        },        onFormSubmit: function() {          if (!$(#username).val().trim()) {            this.showError(NoUserSpecifiedException)            return false;          }          if (!$(#password).val().trim()) {            this.showError(NoPasswordSpecifiedException)            return false;          }          NProgress.start();          this.lockForm();          $.ajax({            url: /authentication/signIn,            type: POST,            data: JSON.stringify({              username: $(#username).val(),              password: $(#password).val(),              application: this.application.name            }),            contentType: application/json; charsetutf-8,            dataType: json,            async: true          }).done($.proxy(this.onServerSuccess, this))            .fail($.proxy(this.onServerFail, this));          return false;        },        lockForm: function() {          $(input).prop(disabled, true);          $(button).prop(disabled, true);        },        unlockForm: function() {          $(input).prop(disabled, false);          $(button).prop(disabled, false);        },        serialize: function(obj) {          var str  ;          for (var p in obj)            if (obj.hasOwnProperty(p)) {              str.push(encodeURIComponent(p) +  + encodeURIComponent(objp));            }          return str.join(&);        }      });      window.init  function () {        (new HGregoireAuth()).init();      }    })(jQuery);    var getUrlParameter  function getUrlParameter(sParam) {      var sPageURL  decodeURIComponent(window.location.search.substring(1)),        sURLVariables  sPageURL.split(&),        sParameterName,        i;      for (i  0; i  sURLVariables.length; i++) {        sParameterName  sURLVariablesi.split();        if (sParameterName0  sParam) {          return sParameterName1  undefined ? true : sParameterName1;        }      }    };    String.prototype.escapeRegex  function() {      return this.replace(/-\/\\^$*+?.()|\{}/g, \\$&);    }  /script>  script srcnode_modules/nprogress/nprogress.js>/script>  script srchttps://apis.google.com/js/platform.js?onloadinit async defer>/script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Wed, 25 Dec 2024 07:13:01 GMTServer: ApacheVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SEA73-P1X-Amz-Cf-Id: uoFv0ONU8qxQzkX7oV-UudF3b_yrln6059X7RI-_UoX3xzbRly722w

Subdomains

Date	Domain	IP
evaluation.hgregoire.com	2024-11-24	3.18.209.96
seo.hgregoire.com	2024-09-28	52.60.158.67
proxyws.hgregoire.com	2024-12-25	18.65.229.2
cfw.hgregoire.com	2024-02-22	99.84.66.11
www.hgregoire.com	2024-11-25	174.142.95.237
cfwww.hgregoire.com	2024-02-18	99.84.66.11

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > proxyws.hgregoire.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains