{"report_id":"375e5181-8033-456c-9555-fbfbe63eefa4","version":0,"status":"done","tags":[],"date":"2026-06-18T11:05:15Z","url":{"schema":"http","addr":"sur-coffrevance-ia.com","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"title":"Sûr Coffrevance – Analyse assistée par IA pour les marchés crypto et actions","dom":{"size":34157,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31516)","md5":"5f7280b116dcdba1b5ee953adb81f6e7","sha1":"004ca395db0d5a02c26483551487de56f1d98462","sha256":"81e5166f1546e2211813c20fade3bb1c0c33f48ddb5649343e63c1f9b633cff4","sha512":"44c30a32ef3e0e4c24e59be4f8cf4b3519f3ab68df94b72ab4f96570906932e174d4e930deb38ae8825feed5d6200bd127fd1faf522e3d5cf7d2a14509485bb3","ssdeep":"768:AWeDYFMdtbBNqxRKmgGNDO5NPw9tYoBtpAxiBh7mIlgoxp:AZWK9HqnKmvO5CTYo6if7mC","tlshash":"fde2503952906523470b69e5ba35af2fb5ab830ccf13494893fc8ac45fd2cd5de0a1ad","dom_hash":"domhasha3fa91b2855b1a08e8f50bda701ffb6f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sur-coffrevance-ia.com","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T11:05:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sur-coffrevance-ia.com","ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-06-18T11:05:16.127617Z","last_seen":"2026-06-18T11:05:16.127617Z","alert_count":68,"request_count":34,"received_data":557095,"sent_data":17463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":1,"received_data":260064,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-14T22:29:33.380889Z","alert_count":0,"request_count":1,"received_data":425088,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-opportunities.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc11f354d28a47828366e5ed0170135","sha1":"84f0a8b5b7a7d288a40d113482693285dcfc84c4","sha256":"584c17b9f6bd2233d5cd69fb1e2b53339ed16e820dfe16bc957bd64ced812271","sha512":"13beac077df72c45814c5d6ef940b7615d9ffc7ffa1c4b2199fd363da6fc68f738ca98eb29ff8c6b996306efc0893a99e65caf09b8efdfbcdd3acde2efe7a68e","ssdeep":"","tlshash":"34f0500b30706036904f093d49ebea4ef7a5d0039804ba15f98c51099fddbbd94f29c9","size":621,"data":"","first_seen":"2026-05-29T11:19:07.323421Z","last_seen":"2026-07-22T21:33:06.613452Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-5P6HHTBL0E","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f947f4d5007df31f0f35b06c366bb4","sha1":"ebbb182109834bf7fe2a8ccdb112d16a35a13a5f","sha256":"7c762cfcceaf8ff4b549ad1c811b2d46c1c5edd846af614da859c43a096046a8","sha512":"914e2ec9bfc0484accc8c8028d6ef656ee2137b8cc3d1432782fab9686c1e5a73b3c06164aa71b203539097939dbd8b6b7a618eaffa71b7cbae47cbd0de8b912","ssdeep":"6144:wjVy5DAFmvq/uYJycf7paX9Z08hdAYOyuInyBLJ81oK:gYO/uYy86+4","tlshash":"2794f9cdb3da74629392f478503f018ba17a69e2f448c899f186ccd42e746998277f7c","size":424484,"data":"","first_seen":"2026-06-18T11:05:19.628817Z","last_seen":"2026-06-18T11:05:19.628817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-24T06:11:56.966723Z","times_seen":1902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/header.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b1cb4df07c706865f9f3e1e87a5fe1e","sha1":"d0a99437af32bc85e451472f5270c468abce92eb","sha256":"6489e9e41e19b9b7693c57212863f0b3fcd805056339e7cc85b169d1aeff1e86","sha512":"16adfd45b8a53ea3e9dc12e2f2d45b44c763bd83d67734fea468dd8103941c786efcc0f866099a3d4ac708be1567a22a8de89bd7654df339b809835477752541","ssdeep":"768:/gA16IhTp6BfAVbxtMDKgi0rzjqU7Z+Nr8Vyq0RdCa5dcAXUj9gjUVLISSQzzmWr:L1FR4BQxiDK5u4ic5dcpj9EUVz8i","tlshash":"aa43a65966e13134d303b03b969fcd08b339945b564ace483d2ca6986f4983897b7fec","size":56838,"data":"","first_seen":"2026-05-29T11:19:07.331319Z","last_seen":"2026-07-22T21:33:06.639248Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-hero.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7c2d08766df94c49ffbfb33ca3aaeb5","sha1":"649f951bd6cd3a9492f5e71dc8599da6ff4467c6","sha256":"8bc146b03f6083f6f19f33e314bc52270887407cca4345b09909af5952e83f11","sha512":"90ead8d0fc8cce98a011c51d33c5247962d400f40fd27b72e374f46ec3dd331b57a74d6e4e8c21725292071c0c93d27147142220f12f1c3047dae983c16a8dde","ssdeep":"","tlshash":"5b318f9a72f310708767a23abbaf5785253491033442ed9c7ddd42102f51d52a6f7fe8","size":1752,"data":"","first_seen":"2026-05-29T11:19:07.333343Z","last_seen":"2026-07-22T21:33:06.640057Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-benefits.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dbd35fd0037e320d43d218945f8874b","sha1":"948cbefcbc63b66d735502e83db7d11da289b1e7","sha256":"827de3e56f86d46f3624f5ade3700be6217b8fd710a0158b737806bf25c814d1","sha512":"24ee97be54894d6e98c7196521c542787ae70813482240e4cb34dc1a0311f132baced53a0a813bcf752caa52d6d356c9a2b08f080e83e8fdd8b416f8069a740a","ssdeep":"","tlshash":"80f0ed1704b16036521b141d1aaaea49b6d8c0079801ba01becc5a09afdea6e96b71cf","size":471,"data":"","first_seen":"2026-05-29T11:19:07.344329Z","last_seen":"2026-07-22T21:33:06.609517Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5eab15af73d3d30917c8c897d930ee7e","sha1":"f48358ef0499072f9631082c205b164eb0e5170b","sha256":"9f819d2fc5f042053143bc4437077e5631cf7c7a6414de55bc2129b20e587dcd","sha512":"3159db01d8a5ea0da73cd49ca7d5d1307caf962b0bb98c594ccaa7c798ac88c0f48877928db99d29dfde935cd365129915d808cae9c4e40e3a1927991c7cf064","ssdeep":"","tlshash":"78c09b8c63475d7155f71b520b5fb744b153322094a15c32091663445521c17bb54854","size":142,"data":"","first_seen":"2026-06-18T11:05:19.632643Z","last_seen":"2026-06-18T11:05:19.632643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/validation/intlTelInput.min.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"475fdc0630d2997afd1f230b7d5617de","sha1":"e57c798a7aac45a8a049481a330893ad9224e39e","sha256":"df2fca8c5e5a0a3455ceb3530594a8ff13548a5ced799d73c234012f05b3bf11","sha512":"ec662d5dafc77f1925bed23f0860675f33b5093b6f47031504fbb3596278ef79855b7b791e05476bd43ff709f47ef257c2b4ef84b6d8aeab588fb15a3d0e981b","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikl/7LOpQn2Vits8Zb:cDiIz8A4knYdYk9bs2","tlshash":"4cf209ae737116376abe82fa30e74503aeae34465604442d389c8fcd0b98ed571f6778","size":37503,"data":"","first_seen":"2026-05-29T11:19:07.321122Z","last_seen":"2026-07-22T21:33:06.636419Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-partners.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ffe7c551deb8250a1cc07cc442dc122","sha1":"4f9add75741d9bca4fe00e157daae6c9b0badb02","sha256":"06f965a8bffba0d054c5f78abedb30db7b5455fe6e46967680a6c7a0171c3a1f","sha512":"0ad46f632dc295a66d947b96a5dd8b9c829bac0cba4375823d5eee9aa60b2788d74db37fe44ad098bbc6286eee65f27a56b53ae868bbbeba4e2a0a7bc767d7c4","ssdeep":"","tlshash":"bbe07d0385711035550b282c09eef700269cc0038c04be417e5d4d044fce21e5af71cb","size":389,"data":"","first_seen":"2026-05-29T11:19:07.301011Z","last_seen":"2026-07-22T21:33:06.627437Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-cards.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a6e82ca664a022fe0ba27a3aa92a1","sha1":"5456648e933a8fb5764c05c00687af8dd2d4cabb","sha256":"710ab8e8b52be5f2338f028f9e60c41b7228905970305f20a55b9edb3776307b","sha512":"637c4e582589f43468f8c2f63a25e115e21408f2b9fe660ac4d0f752072275ff3d99576843d198df00919c7a9e3f0a2f95fe154d82fedd1bcfc40cd0d74ce7e3","ssdeep":"","tlshash":"7bf0e51700b05031515b203d4aeee649b7e490036808ba11b98c4109efd9b7a65f65c9","size":532,"data":"","first_seen":"2026-05-29T11:19:07.308261Z","last_seen":"2026-07-22T21:33:06.61177Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/coinbase-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.212Z","timestamp":1781780692212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/coinbase-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-eff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvG5QwLU%2FlvAL%2F10dTkt%2BGv1eOVB6i6elCezGuor0B5lF1Env7m5eN1pg3ura5Bu3FfetSc%2FA%2FfxG6O7OXFVZObjVqpfvwDLHG6UN6bwki%2BxwCPR5WVMvvYlvbqrkt87qtb%2BibSS4h9C\"}]}\r\ncf-ray: a0d9d0ce5ff85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3839,"size_decoded":2496,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28bd94ed1796c03e587a0a98a90e16dc","sha1":"651cd56ae54c37e8ceef0d94a61eecb6fe236247","sha256":"cc6b71738a6a1f8c4b55137201c8568470c0b586c4a542c2d1f858c338b4b0b8","sha512":"b1c22b60ca273873017296be230927129e7bf66da4b2f4d1cc578dd06fddb6c634b9a314cc7eab745bc215c99d63e9dc024b2f14edceb6901ab86490a942b35e","ssdeep":"","tlshash":"c78162ef23f855e9f0c5d3e3ef4340393d4aa1f20a58cb5453585e6793820ac686ad67","first_seen":"2026-02-01T05:35:27.993963Z","last_seen":"2026-07-22T21:33:06.642932Z","times_seen":104,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/validation/intlTelInput.min.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.042Z","timestamp":1781780692042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /validation/intlTelInput.min.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-927f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lw%2FoT6gwTGx7vCfWFoE3rPdgPejqoOs96FgD5avlfN2VsHMXI0ILDT2pzkCt2nrlSDCT%2B8GmIRNJQd9QWoggd3LmIflJumt2MpqGTtFCgmEOwaLkwcSyUh%2FyFKDW4dFAFtEUBNGuTWbJ\"}]}\r\ncf-ray: a0d9d0cd4fcd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37503,"size_decoded":14040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29515)","md5":"475fdc0630d2997afd1f230b7d5617de","sha1":"e57c798a7aac45a8a049481a330893ad9224e39e","sha256":"df2fca8c5e5a0a3455ceb3530594a8ff13548a5ced799d73c234012f05b3bf11","sha512":"ec662d5dafc77f1925bed23f0860675f33b5093b6f47031504fbb3596278ef79855b7b791e05476bd43ff709f47ef257c2b4ef84b6d8aeab588fb15a3d0e981b","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikl/7LOpQn2Vits8Zb:cDiIz8A4knYdYk9bs2","tlshash":"4cf209ae737116376abe82fa30e74503aeae34465604442d389c8fcd0b98ed571f6778","first_seen":"2026-05-29T11:19:07.321122Z","last_seen":"2026-07-22T21:33:06.636419Z","times_seen":60,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-opportunities.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.048Z","timestamp":1781780692048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/js/block-opportunities.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a227841-26d\"\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndz2I1sLbFJLsiLO4LbD23wwlpVL8Yhi0R%2FFihmn6XGS5GG5RJCNpUUeh7aMYkWg4WSV4x6g3z%2F%2FbLsR%2BE%2BVaCGoPeyAbsLRULoCeGbo6BxDKqzExO1wslosW8cjeHT6sCVMatfczPl5\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d0cd5fd25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":1078,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8bc11f354d28a47828366e5ed0170135","sha1":"84f0a8b5b7a7d288a40d113482693285dcfc84c4","sha256":"584c17b9f6bd2233d5cd69fb1e2b53339ed16e820dfe16bc957bd64ced812271","sha512":"13beac077df72c45814c5d6ef940b7615d9ffc7ffa1c4b2199fd363da6fc68f738ca98eb29ff8c6b996306efc0893a99e65caf09b8efdfbcdd3acde2efe7a68e","ssdeep":"","tlshash":"34f0500b30706036904f093d49ebea4ef7a5d0039804ba15f98c51099fddbbd94f29c9","first_seen":"2026-05-29T11:19:07.323421Z","last_seen":"2026-07-22T21:33:06.613452Z","times_seen":34,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/1-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.070Z","timestamp":1781780692070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/1-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a227841-1e6\"\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwOU9Knx14DwHVzs6m%2BtDqMNy6ZIIUpvWm8oug1fiBj85J4XXT0s0A04Nwg%2Bf3QWXRPARPE%2BV%2BSB0rc30xUdt0K5QnZ4sQ1MhbDpGSTp6rIR3xaa0fbZEwQ1lTu8uBxL0z4J2Jseg0GR\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d0cd7fd95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":1001,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac489bc5c3a0c31fda739db8195d2bf6","sha1":"afd67eb161da250eeaff7e488b40fa83be41bc92","sha256":"fc0435ed03a3ecce1cfb22a835bc7f22c709a67b06c1158029011a011c755eba","sha512":"9187198bb54b90ecddb30734784dfec4ba7378602cc27fe45d440f791394f833c79f453beb5c52a0ce6a8127cead65d30ceb853ec833eca411aca0241d362542","ssdeep":"","tlshash":"73f0e9f9b3088f88830347355f086576159f30fb668e156751402d87724ded6ded6dac","first_seen":"2026-02-01T05:35:27.983504Z","last_seen":"2026-07-22T21:33:06.653912Z","times_seen":102,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/css/style.css","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:51.841Z","timestamp":1781780691841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-318c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KUm%2FdM7GJiFKEcz7UZy4aNj038Lnz1IDTRpknohrw%2FCvAIdyWybIrF2xAJfGjR4%2FK1N%2BFqglOXM8My8aXGNyHrhqsH4el0Vwb80TNleCzPpY7qE%2FPC7ReQA7qL4TvtV5P6Jw%2FehBwoR\"}]}\r\ncf-ray: a0d9d0cc0f915ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12684,"size_decoded":3761,"mime_type":"text/css","magic":"ASCII text, with very long lines (12684), with no line terminators","md5":"10987acfda4791e45892c100fb3eb9fc","sha1":"d1059c6900632856fbb8910866b9b323d214a98a","sha256":"bc11191d335bd9bd4e0af727b83287e6ad03242380b49af7f8d24809555f24a4","sha512":"82cfb4c55b45d91491adc0acb4d685c7665f20f9d2e1ee72654612c3f19fb32d53dd451e4fa187e357338797c9cd062c048501b3a0e4daa6c2d998fb39aa4946","ssdeep":"96:1ojX+/UZ7pI4L1j4fXjRO4ReEn7lBNupEv/YD836oi0GNN3LL1vTeherZ7qx+5oE:MzM4JCsrEnOX17eIrZaEvbJvgFc","tlshash":"2642322572052304a61be158bfda4b1c533ca511e217d2febf9e3a0e96cf16416b2bcd","first_seen":"2026-05-29T11:19:07.294053Z","last_seen":"2026-07-22T21:33:06.606731Z","times_seen":34,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/x-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.072Z","timestamp":1781780692072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/x-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a227841-164\"\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMnnamWzvx1owPLcpjgcEhvLl4tgOI22zOoy8Su1Hznuvc0n%2BHQU%2FTy40thbCLAqRaRTneFgndqDCEQqDqC5BQBgQYC4UZ%2BpRRJOYCGOVjWxB%2BquCByeng8XLRajfUdG46NAA3o6%2F4us\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d0cd7fda5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":978,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9d288b6a62efbb46adf6c414e894b91","sha1":"32d0325ebf05205f61a3d4cbf24532df4fa42855","sha256":"805f0ebb3ed4c45904f1b5b3dd4fb17ec8a13133d95f703f14e16278a860eaf5","sha512":"b5f06d02f99625d7f575fa9ea5f587c5a9b76a3ea1cb0d3a23764ac215178dcacb0b2ad9af1c053d012402f95917b305ec353295d438d95a0912238683768bb1","ssdeep":"","tlshash":"28e068e9114df384840d8ed04229333212da71e2abc4d34cc1526202f8841499c1d5d9","first_seen":"2026-02-01T05:35:27.974946Z","last_seen":"2026-07-22T21:33:06.655307Z","times_seen":103,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/fonts/RobotoCondensed-Bold.woff2","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.169Z","timestamp":1781780692169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-Bold.woff2 HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sur-coffrevance-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\netag: \"6a227841-1029c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBTihYHHIzX0dtBsOLGlUZDyuGyQwwUc%2B58btHPJVyNDK3cxsc9b1QXJUw0nLFU0yvdydnj7%2FoW8o5d8TnTYt7m%2FV6f9aGi2I652D%2Fs8dbaTOC76eob2UQYGz9Wjh%2BzBbIfoB7GBvSYp\"}]}\r\ncontent-length: 66204\r\ncf-ray: a0d9d0ce1fef5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66204,"size_decoded":66952,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66204, version 1.0","md5":"eb3479e39688e6b86a926e32fbce8211","sha1":"fb4a169cf706b05db70496d4ee824b824513b5cd","sha256":"9b8b48a4569e96489a13cda60a878f0ef1e10cb987dd02e9845b12641354b988","sha512":"96bf1c97e9d8a8c10614a6295334d16c8f3406fb854fc9d5cff653487287173eb90b42ec958f7e35d6395882747c8ef68ea65cf454b14c291e1faf513847a458","ssdeep":"1536:iB7TVSmu0xY5/75fi+0nNpreJk/BxNYduWfQ8rN0tuIH0:iB3Imsjwp6axNPCQztH0","tlshash":"f35302676433681bf79a7290b981073059335efec2e8d0834458fa7dd25d2e150b2fea","first_seen":"2025-10-01T02:38:25.778132Z","last_seen":"2026-07-22T21:33:06.641657Z","times_seen":172,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/sec-b.webp","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.211Z","timestamp":1781780692211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/sec-b.webp HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=5,i\r\netag: \"6a227841-6f86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fn6u4xE1HSlKFi40%2B4VPPnFMBS%2BdU7%2F99GjqtpuJyt5fLRr06z%2FtcMZV4l%2FHsHIAIJrCk995Z5O3hbcYoOne4nT6s8MnRTUh35n7sc%2Fb6QxHpU9CY4e02xosGZxkAMbIFmrBfCipK0J7\"}]}\r\ncontent-length: 28550\r\ncf-ray: a0d9d0ce5ff65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28550,"size_decoded":29298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47970bfc7e827a72c5144644617bf884","sha1":"10d90d462c590e9ca2240da4e99fb5034c04ba2c","sha256":"be1ec2a169b943a5297c2d04b74014b72763b06edd0d6a5da02584c60a8a1b15","sha512":"7a5630d58d7697318510757f869a62c2ab732fd9f61f447b3358cca4e24dcde01e7d950f6ad5a7c97165fd7bf702e6b21859596745c6d9e1265611486c30b3f8","ssdeep":"768:ESizQmpupxgHPrgYCz54lSeRFzgDMAMwOlSE:ESgQmp5PYdmDzgDM6ISE","tlshash":"d3d2e1b761d71f632c72c1b86e48e80976ec84be0f4a3886c360757e7615724d2f4ca2","first_seen":"2026-02-01T05:35:27.999381Z","last_seen":"2026-07-22T21:33:06.632852Z","times_seen":104,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/header.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:51.839Z","timestamp":1781780691839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/js/header.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-de06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXH17kRyhiWDkGnDa0qa3cyyp0pXAuGJQ4CCgUIDdQxseIyo%2BxU5VKqA6xbRVJSbKp2sdKV8j57LWPSsccDGAs1CuifSNPJL7rYZSYrTkZBhgJR4U3FcBJyP3EccVqBeA74eWYZ7%2FsxR\"}]}\r\ncf-ray: a0d9d0cc0f8d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56838,"size_decoded":16172,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (724)","md5":"1b1cb4df07c706865f9f3e1e87a5fe1e","sha1":"d0a99437af32bc85e451472f5270c468abce92eb","sha256":"6489e9e41e19b9b7693c57212863f0b3fcd805056339e7cc85b169d1aeff1e86","sha512":"16adfd45b8a53ea3e9dc12e2f2d45b44c763bd83d67734fea468dd8103941c786efcc0f866099a3d4ac708be1567a22a8de89bd7654df339b809835477752541","ssdeep":"768:/gA16IhTp6BfAVbxtMDKgi0rzjqU7Z+Nr8Vyq0RdCa5dcAXUj9gjUVLISSQzzmWr:L1FR4BQxiDK5u4ic5dcpj9EUVz8i","tlshash":"aa43a65966e13134d303b03b969fcd08b339945b564ace483d2ca6986f4983897b7fec","first_seen":"2026-05-29T11:19:07.331319Z","last_seen":"2026-07-22T21:33:06.639248Z","times_seen":34,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/stars.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.069Z","timestamp":1781780692069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/stars.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-1d22\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8nh8sDd4gjdVF%2By5gmSwgdj66KSRlI%2B348OkQA%2BOFS1GX8D00H9zeq8g71P9Zrs7MmU7jLqEmwxUM59T%2BvNBm2aIHGDtCZViaxiFnv1VN2Z66rdOnk0o6MA7oijGPzLZoEb3pAT0anN\"}]}\r\ncf-ray: a0d9d0cd7fd85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7458,"size_decoded":2744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"014a0e3b61fba37a9c6fc12662901ef6","sha1":"d54b604534f25a15a46beaadf4254ce5f88e15bf","sha256":"e90bf9cc25d153355a41b65e010557055032a2dedeb905362b340bfa267b10ff","sha512":"48a788a683542461581ef176642bebf818a7888cf87d99bf38b09ecf80181de494d92dec96ae36d8cbf56008f8f9966c9542dd2fa6a55e00b25e7c1dad54a4c1","ssdeep":"96:T53xYfmhdJbQep+MA0NoKlUR3t573bcIhue1fRqzlGNv5yDa/vt:d+gAMA0N83t5ncaJqzlGjN/1","tlshash":"e5f1a6f4159cb3a8c302dfc1cf6922f469ac76fd67de8b61e3b06896783819ac5448c5","first_seen":"2026-02-01T05:35:27.98436Z","last_seen":"2026-07-22T21:33:06.628182Z","times_seen":104,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/decrypt-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.222Z","timestamp":1781780692222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/decrypt-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-2b2f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaaiKTv0%2FBQCTZABC8kDi6CLYkMlW41vN5C4ITRwvpOL388SrmDTwD8k%2FDskfGBAtYEds2pF7%2BP%2B6aboWWHVTaka8z%2F7W%2BTcOYBWE9aXyOxLEYPc7%2FfmIeB4MSvFYtvGFsG0WwijuVcE\"}]}\r\ncf-ray: a0d9d0ce68035ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11055,"size_decoded":5759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0bfdb82b88bfdaca38a61b92992c6b4","sha1":"537966a938067e93b5a528d51a39d9a4acddb1e5","sha256":"84dae5d901c30dfd7212656608dc68da3880b37925e412ed231a31ce0379b3bf","sha512":"ff009f66936f92de9aadfc9a427744c393b2cbb749e8d054ac3503417c9bf0be873b26e2d1791753fb609e312373d1cef0180fda411011b577290bb61df95f09","ssdeep":"192:/W0rqAs/vpx++UdglW3ob5GBAhUDJ0t9VFkkTccJlPiWMFPA38pCNmf7aW0OA7iQ:+qIps4FxUS5kpcJlPOFPbpAbOATXi7WR","tlshash":"9132e9ddbbb462f8f940f3eec31268787a0668e73912ca6cc7ac1d06951244cd996cd7","first_seen":"2026-02-01T05:35:27.968664Z","last_seen":"2026-07-22T21:33:06.622298Z","times_seen":104,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.459Z","timestamp":1781780692459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nOrigin: https://sur-coffrevance-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 11:04:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 56438\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-bma-essb1270049-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2688008\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBTvrtjgMsUyYIzV9w1nmjSFJaaKw%2BoWICQphdE9KRjrdAPQWDHhFUSGcY%2FbGP3uCGGORJMQQFofEVhK9xjYk%2FGf1rdffay4fVh7g4EarAaoI4xVlnZsJPSFZAsNZFI1JgE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0d9d0f7ded556c4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258914,"size_decoded":57588,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-24T06:11:56.966723Z","times_seen":1902,"resource_available":true,"data":null}},"time_used":6403,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":2,"ssl":6386},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T11:04:51.440Z","timestamp":1781780691440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FE%2BClLMyTVwkXDvJSagjNKPO%2BUGWxmN0COhkbrMre6r%2BMv96f%2BwT%2BeVPB2Fi1087JsfK0ZAHsJMoj5toYElPbwAP2rBkUBcYUnXHvDCTGldQ30rIFjtEI1Pk%2BXOrkRt0DEr8AL%2BPAThk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-ray: a0d9d0c9df415ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34172,"size_decoded":8802,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31906)","md5":"0f2cbb57a6098fb0603623061dcaebab","sha1":"a3ccf501a452e9f72f19f06234c4d394e0ff0b95","sha256":"b7d4f1d6b8da9841efb68e0f5da030c781b3ff18755c3953488594b8854817ff","sha512":"4c838e424698e3cc061fe450f5d4a57b723490e2f073231727bab2fe5c7b9f0bb9eae013266f5f5cb88a3ef400dcc01de94a7d03c29e8c09fc2fa660135e45ef","ssdeep":"768:8CkKjFkNFjl62lY4en52pNf9aYwp1xwRCRpb2hlgoxp:8KhSD6AYf2p/aYw2CHb2r","tlshash":"3ce21a7c91a0a523461734e5ba629f2b749bd318ca134858d3fcdac46fc3cf5ce660a9","first_seen":"2026-06-18T11:05:19.616622Z","last_seen":"2026-06-18T11:05:19.616622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":30,"connect":18,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-benefits.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.050Z","timestamp":1781780692050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/js/block-benefits.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a227841-1d7\"\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1GTHbUOktxoUGZ0RAw3ZGv2gR5UfDhqMxmYB5duusAY3GqtkqRlJihl9EPZfBVSzN1w01I8kTj3tEMn4SG0xu039IlRBxmupjQtYKsw%2FIUdPqhVxCaNvXtmK7TBBZUDOprd7f9tIigJ\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d0cd5fd35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":1007,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8dbd35fd0037e320d43d218945f8874b","sha1":"948cbefcbc63b66d735502e83db7d11da289b1e7","sha256":"827de3e56f86d46f3624f5ade3700be6217b8fd710a0158b737806bf25c814d1","sha512":"24ee97be54894d6e98c7196521c542787ae70813482240e4cb34dc1a0311f132baced53a0a813bcf752caa52d6d356c9a2b08f080e83e8fdd8b416f8069a740a","ssdeep":"","tlshash":"80f0ed1704b16036521b141d1aaaea49b6d8c0079801ba01becc5a09afdea6e96b71cf","first_seen":"2026-05-29T11:19:07.344329Z","last_seen":"2026-07-22T21:33:06.609517Z","times_seen":34,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.403Z","timestamp":1781780692403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=khfln8vm9en6ujls0j3c3pqv4n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-48d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uw4gWhJ7mzcOAu2XF9Qx%2BylGujeVWwuqqFWPMpDA2QURc3HCMuxDhcTZH6r4IvOdasyoQDkhLIAun%2Fm0fV6BWKsIA5pvXxeHrH2nhA8xSVMUpPxS2wzB4x%2BffV0j1OOkhSkXekMDvg%2Br\"}]}\r\ncf-ray: a0d9d0cf883f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1233,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ecc52ba801200f4e6e07bce14f5b2c0","sha1":"22f3381961dda0a6f700233be04ab2e1dec173aa","sha256":"476889f1bd277c069ef21987bc4af168c0cf339d1f1c775ddcae5af482c7460a","sha512":"e059f288819e5d94ac593d24e90948529e4e8ab7541deac613b50833e008235c2a3ad87b72ab9bcc5fea6192114179242ee0cd58108273bec7c36530d0372af5","ssdeep":"","tlshash":"77216b66b22ca418d32383ce224638e9303fa0ea771603c4c5c42e6f96646c61c3f6dd","first_seen":"2026-02-01T05:35:27.974168Z","last_seen":"2026-07-22T21:33:06.648646Z","times_seen":102,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/css/index-mob.css","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:51.842Z","timestamp":1781780691842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/css/index-mob.css HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-3e43\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IopV9m2sTRjBiKwkFHZb%2FSWeuxsnb5S18kcpMJ42GqTsQ07IhgV52YR7soCoClItl0dCxCqEYn35dd5N4ktPKFr0b%2BU9S%2FB0hnw4fjuM7KPmdZdX7M2SDcnAB19qefr1EHgnKRjZJwcl\"}]}\r\ncf-ray: a0d9d0cc0f925ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15939,"size_decoded":3707,"mime_type":"text/css","magic":"ASCII text, with very long lines (15939), with no line terminators","md5":"cec98a79a19bc73520c0fe6015402e72","sha1":"5aa3cf9414acf223f5d745b37d94502935e507d7","sha256":"ab55cc4546ada02e037c55d7beb9c27eaa5639d5da33027cd6f3754b4bf4a6eb","sha512":"d77f4708c2b29e93cd5074dbd05d7a871cd6ff3caf7b7fac455b1b876991554135859b22c1546e47f997e5275adc4a80268f6e17fcd3db61c95f00d09047ef07","ssdeep":"192:hCi9TdXhfvN3h/O7xtsMRZX0w7IFWQJa4zXKHwv8XYJcSxcniHlS/SvRuzL7yT1r:Qodx3FVLOuJJcaezw8uKQStPcBaIT","tlshash":"7762642892142115f293e8793f96bfc6d306e571a707e0bdcad9312dc2ce56606b2bcd","first_seen":"2026-05-29T11:19:07.339613Z","last_seen":"2026-07-22T21:33:06.649897Z","times_seen":34,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/phone.webp","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.039Z","timestamp":1781780692039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/phone.webp HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i\r\netag: \"6a227841-420a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8bRbWi8afTKHuAuiuX74rVzRt0lz84cOPwFMpXjfxPQV39U0Aw%2FjIurGzsWTZcErbmZvVdM1mnKVqHnkjSspOp4Cg1LiAC97%2BBZLCTBOZ6JrKvUyOoRcfFKQlgxYRi3LHZngdmfAf85\"}]}\r\ncontent-length: 16906\r\ncf-ray: a0d9d0cd4fc95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16906,"size_decoded":17644,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c334ed25ee125a3a0acd8829568b9f9a","sha1":"8ce713ff656d9956f2bb9d0299b04e68201c2e21","sha256":"12b05a7ae2cc672765bc338b9756fa581d21fb7bb12690c4539e80949e071f8e","sha512":"c23b461315bfc48eaffb986a172d7e87f9a59d1dc40f424649a4a4eed171bbfc67f804330ce0fca099260d957e2e152ebb5a4cf33677ecb488179954a940fc72","ssdeep":"384:Y13qlNJOzV0p5cVX4OVelnIorrZtn670tJhuqG0:ASNCVqS4WeprrtJcj0","tlshash":"1472c0fe2b0a0076cd0a79f6c9417588ec8f264952e4c566d94d5cd2cbacc5e813bedc","first_seen":"2026-02-01T05:35:27.977673Z","last_seen":"2026-07-22T21:33:06.608152Z","times_seen":104,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-hero.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.043Z","timestamp":1781780692043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/js/block-hero.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-6d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibSJ0alp4l3y1qq47MLSIRmbG%2BpnWcL3rTQ6lIm853IOVJZVeTxJAWnre8A1UZN8D%2Ba7Lt02iN%2B%2BbcBUcSY5Q9VEdxAOzseqQzPRhQwfxiuYxoJX%2FioSkP0I8wF0Ohar5jnp6%2FOxxtFE\"}]}\r\ncf-ray: a0d9d0cd4fcf5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1752,"size_decoded":1371,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e7c2d08766df94c49ffbfb33ca3aaeb5","sha1":"649f951bd6cd3a9492f5e71dc8599da6ff4467c6","sha256":"8bc146b03f6083f6f19f33e314bc52270887407cca4345b09909af5952e83f11","sha512":"90ead8d0fc8cce98a011c51d33c5247962d400f40fd27b72e374f46ec3dd331b57a74d6e4e8c21725292071c0c93d27147142220f12f1c3047dae983c16a8dde","ssdeep":"","tlshash":"5b318f9a72f310708767a23abbaf5785253491033442ed9c7ddd42102f51d52a6f7fe8","first_seen":"2026-05-29T11:19:07.333343Z","last_seen":"2026-07-22T21:33:06.640057Z","times_seen":34,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/yt-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.073Z","timestamp":1781780692073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/yt-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-46d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHhxCPr0w5fPK4iYCuVz64kkJmkDfquj3iBo81PL6tds0VREllk6qrgxsu49M6an6pTPFsO4ASqL6wGSL%2FOf8QZbqHJxFgmoVftfXacBCk%2FEaKCLO%2B6Crxmk5P1RjmBsuHMt2POxg2Lk\"}]}\r\ncf-ray: a0d9d0cd7fdb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1133,"size_decoded":1294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e0c0d2d22e110c402986b7bdf984049","sha1":"eec12524e6bd14bfde045ba21702eae55540bbb1","sha256":"b23575dea942fec2968ec7a483526046cda22064b11d489a690da9dcea47b3f1","sha512":"d8d8f321a0b64f4be55b8f60ddba121060481dc6ab253f9bfbea5f17c7f56bff2a1ccecf91c62c69595ac8896445167404361140fe989e3ed3839a7200854790","ssdeep":"","tlshash":"48218ef683268a60e90ddbf4d68e346c209637b2bb59c386d3587514f04b4dc9658c4c","first_seen":"2026-02-01T05:35:27.985538Z","last_seen":"2026-07-22T21:33:06.614809Z","times_seen":102,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/fonts/RobotoCondensed-Regular.woff2","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.165Z","timestamp":1781780692165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-Regular.woff2 HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sur-coffrevance-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\netag: \"6a227841-f8b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvBAXkgWvJgqGawjWXqUmARy3Xy%2F87KVkcDv%2Fe9NokhjX1s%2FGi3nGRm3BeMk6LfSGumHI8Fj17RdvV3LbwqJDr%2BCqN4bX6J04g02S5HpvX%2FVfPWTKYoX6S%2BO5f%2FTyg7S6ObV%2FZmCREat\"}]}\r\ncontent-length: 63672\r\ncf-ray: a0d9d0ce0fed5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63672,"size_decoded":64425,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63672, version 1.0","md5":"e813ab562ab74cf2fea116f6573ec2a1","sha1":"3a5d2faa0d673b8839df26a76735aa1ee0c02bce","sha256":"07fe1001734bda1c26b3773008f02e54a9998bdb7c0592eabbc4e948bebeebf5","sha512":"07f1505bf8d636d373fd7780425aceddf78ba39f09e3733a9acd82dd39f5a41f6fc8d92a4ad3ff379180b87e09c6da8e8ba7c2718666dc57be2d7f54bbc41b80","ssdeep":"768:ovBaPod+pexZSKCbG0eOyDF4ZkNAjjmhDQEVo8mb8rJXErm+jvRfYOdRMgvV0Dzp:bq+pCubtyR4ZiD/GIXEC+Igqgy/b3Lv","tlshash":"7a530249b6d53a262a3fd2cc958280c3c419ba72e8383c7bf92dd6dac85dda264515cc","first_seen":"2026-02-01T05:35:27.981516Z","last_seen":"2026-07-22T21:33:06.649288Z","times_seen":161,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/deloitte-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.218Z","timestamp":1781780692218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/deloitte-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-114f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0MtpmzkXPR%2FQRsB03tJTpUO7hVIW9WWwRU6DOrxHy%2FT3TrGFELR%2FXZpYVxzVr7MsU3bk2pho9IPJvzh6agvKRj%2FdV70cLtjLWRGBaXD3SgVZVnKXA0Xe9aOyMoLcVfEjiz7%2FjZErZDbn\"}]}\r\ncf-ray: a0d9d0ce68015ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4431,"size_decoded":2738,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6285a881129c28fdb30de641e1e0816","sha1":"c8b507f3d04b7f79b30dacfb19d83c9a2ab826b8","sha256":"13813c91955ef07765d51425c95d2e6acef3a7ce1556743f112325dcaafc85ae","sha512":"4b4e1a78eeb05c591bb2202c3f1eceb1b42298b79b5cb9d45ab06695588c7c2409c4936a6f58962783d759f47ff9db15ac3c6713f962efc8b1a7dc5e4d27e2c1","ssdeep":"96:QZa2bP+VaZKmCFIf7go6gVh3QJvvwwoQwS+e5Rm6dfHI0X:QZbFXJfXVgRYwolSHzhd//","tlshash":"4091a6fe4be9256cf908a7eef616846d3e822aec2751cb91c3185e4d345581cec21ce7","first_seen":"2026-02-01T05:35:27.986972Z","last_seen":"2026-07-22T21:33:06.656634Z","times_seen":104,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/ledger-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.220Z","timestamp":1781780692220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/ledger-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-d5c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtvKyku7MNo4i8Zrs8k%2Fhmf7jRm7jihy9HZSwqcvLaZSYQEsALSczh33Ri4%2FkxmuNqYVfSat7xy45EFLjBOklSqndcPGGeLb35v7%2F5tmkT3eX2EKYti%2Bx9NmSqxFdBFT40Mr1UE%2BgTQn\"}]}\r\ncf-ray: a0d9d0ce68025ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3420,"size_decoded":2321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2701dd236218c68e506257127151a98","sha1":"dbb9c8e8d180f2edb5caad16017adeb99ad24637","sha256":"a188ab0cb689c9d51976cced1034636b097d5bd4fbd49854cf3261c08e583db0","sha512":"928b21138b211639a30345ec3bda91164f8d727cb9e7e348b453da15469a37dc30cfa95932c313269a68d2c0993e7e10659e4eab0e496775eefc69f29fe8213d","ssdeep":"","tlshash":"b36185ce5fbb19e8f84ae3fddb0268bc341678bca562db50d3081a46f14245c8531d87","first_seen":"2026-02-01T05:35:28.000228Z","last_seen":"2026-07-22T21:33:06.616292Z","times_seen":104,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/validation/style.php","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.233Z","timestamp":1781780692233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"POST /validation/style.php HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nOrigin: https://sur-coffrevance-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=khfln8vm9en6ujls0j3c3pqv4n; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PinNIeetv7ZGKsrNUV8CsRPRgACUKDRvfjjN0uSBGTDspvfiIXBaCI0R1oEC%2Fj0PEPk0b3RlILH4880LE6eEehBQLxMZllRnKJg%2F28mUVcI6HrkmeGGLlFywKMcL%2BX%2BXfVONLh64c5b\"}]}\r\ncontent-length: 42\r\ncf-ray: a0d9d0ce780b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":22,"size_decoded":1061,"mime_type":"application/json","magic":"JSON text data","md5":"55eb38fc6cca975ca0f9ff990a588b7a","sha1":"09ea134e5300f57a71efa5088fe519adf94ae164","sha256":"fa99d986e8e92525d69ed6c10fe65d6cbcb151b1052ec4825804db61b5495d66","sha512":"f892b590a1d0e63a189b0b1ab3e0629bd1eb5e722a3f099bac581ef3d0f8439d9813d3c94a1895d05d635301f8e052fd653251a9d0c7a12b7c7d2205fec23a41","ssdeep":"","tlshash":"767000800880200820202c0b208800a00800028080002308000c0a20ac282880082308","first_seen":"2026-06-18T11:05:19.622897Z","last_seen":"2026-06-18T11:05:19.622897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/css/index-desk.css","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:51.844Z","timestamp":1781780691844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/css/index-desk.css HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-3b95\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jty77bm1yyjIAWGaLHe1C6Wv21Iq2PzAjYMKmHG%2BWxudfLzHJNTY7yq3Wf%2BF3M9flOE%2B4Kyt4ewfq3LEs0c82aYD8gSl8%2FlThd1HdqLmT8TyOhG6ktIyBzT%2Bep7O8ndqfJNAAX3554G8\"}]}\r\ncf-ray: a0d9d0cc0f935ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15253,"size_decoded":3209,"mime_type":"text/css","magic":"ASCII text, with very long lines (15253), with no line terminators","md5":"dc2f0f8acd342088b0e6d5876f73c3df","sha1":"8d82f24195867228a2a078db72f83c99e2fd09cf","sha256":"5abe5d5b844996e5b8537d508d28c24a361a77b2d7d9a548db3b35f9ae70de4c","sha512":"ccd0549c9d6e6dee700e1bd84943d960f378cb4a9892152d8e672314c4f9024d09995eed7517b0af4edaaf9e52aa49209ae749c43f181721542df672b1fc5cae","ssdeep":"384:gGcEzQEUm3qzw9Wby/v9XUqMyfUqwVdhMMQMCIAO6PWV:gG/QEUm38w9Wby/vBUqMyf0","tlshash":"a262b198a1103209e657e43b3c9f6e488617a230e777a5bda573311ccbde3a51063bde","first_seen":"2026-05-29T11:19:07.315021Z","last_seen":"2026-07-22T21:33:06.650457Z","times_seen":34,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-partners.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.045Z","timestamp":1781780692045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/js/block-partners.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a227841-185\"\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7ueoV2usZ0cY%2BUD9OSb3pwvUKPF638p60sZQnY%2Fk%2BbN%2FCYmS7UsKvTugGkj9PjjG2r2wWnzmgabmjn5be38g7Nh3oF6JJcGx%2BBKcFj2u3nABXcnpiVYngAkE%2B%2FLgVU4BKZvc5ryJMWt\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d0cd4fd05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":981,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2ffe7c551deb8250a1cc07cc442dc122","sha1":"4f9add75741d9bca4fe00e157daae6c9b0badb02","sha256":"06f965a8bffba0d054c5f78abedb30db7b5455fe6e46967680a6c7a0171c3a1f","sha512":"0ad46f632dc295a66d947b96a5dd8b9c829bac0cba4375823d5eee9aa60b2788d74db37fe44ad098bbc6286eee65f27a56b53ae868bbbeba4e2a0a7bc767d7c4","ssdeep":"","tlshash":"bbe07d0385711035550b282c09eef700269cc0038c04be417e5d4d044fce21e5af71cb","first_seen":"2026-05-29T11:19:07.301011Z","last_seen":"2026-07-22T21:33:06.627437Z","times_seen":34,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/binance-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.214Z","timestamp":1781780692214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/binance-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-118d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIO%2BirpxH%2FAtMj0AMtzhi8VkisPTvUo6kyz5huiGL17ielT1mi9s4p68DiOAch5mllymHIR%2BYaqnePU3CLOPoBM6L0eg%2FP%2FaJvCtTIerAy7EIEYeND9wtoUkWGnNyS%2Bpj6CkSmVF22rP\"}]}\r\ncf-ray: a0d9d0ce5ff95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4493,"size_decoded":2785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35a001dceb5d304e217ae7dcde7b9328","sha1":"756564a2c8c1eee3b30be5389524025e57c6f9c5","sha256":"744973c7abb9be82e61288f0dfd09338adba6076c6dbbdac4463755ac20a776f","sha512":"e99c6d04081a34e672fb23b806931d2c261d5a1338f09e4c81740969a711d0353d8b8a85eba1f003a298407aab72c842dbc8e26913903bec6fe5dfece9a60a37","ssdeep":"96:r4Na2W38JZDx1cvUGHW+cyeDtnIT2aNAS79XJJcQDkHij3bmMXSu:r4NSup82h5UmQp3bmc","tlshash":"c49193c87bec22f0e802abd7d917643a7d1727ff6b81c611c7d09e86549406d4c5adc6","first_seen":"2026-02-01T05:35:27.975741Z","last_seen":"2026-07-22T21:33:06.619914Z","times_seen":104,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/coindesk-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.216Z","timestamp":1781780692216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/coindesk-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-1a06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO%2FY8%2BSZp4sXr631w8Fac%2BFcbqX1s6jbzTBJHDeqHRd0NCZy1xdFh1Yeo%2FKL%2BesIuHYUa8Q0SJDGRHAbzagSKCWhDkrOilCSq4NFW%2FcAaSXfuLRDloyM5RHl7Ab1ezukuRfBssomuFi7\"}]}\r\ncf-ray: a0d9d0ce5ffa5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6662,"size_decoded":3519,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98204686e236109e0306d0e23510cb67","sha1":"0a3a2a2832fe38f81ab58c3c97af79c1a35ae2b2","sha256":"fdb470fec4ed878417026c27211c08dfa773248688c135cd1fe4c5e7825ba259","sha512":"3a3ac622b85daf630a18d0db786e8b2faeaa5db7d95d62e4f487a695a4243ef01100dddefb9212610e59c65d2ec6010c103fb0dad15d1f14c6f03ed454e4144b","ssdeep":"192:8rg6THKrsJ2Fax+lSzJR+uyqsyPyT+DD9VZ/Naatg:gRr8F++lKR+uxpPyTykatg","tlshash":"6bd109ee63e4a2e4f002c3f5d917049a3ea73cf92b51c504cb808e69ec5959d4d98ed3","first_seen":"2026-02-01T05:35:27.99183Z","last_seen":"2026-07-22T21:33:06.621243Z","times_seen":104,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/trading-view.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.217Z","timestamp":1781780692217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/trading-view.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-e9b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYh7IZs6LTfpIT9O%2Fh7nQlYE%2FX4IfsjlbEPu29JOGa5DlDur5YTjJ4EWcNtzbn%2BIh0NrQaipUGbHBy0mHl76eswkwsIqERZqkblTW2MTOwHIqD8mOsCVk7Y5Sq0gWZKyrPz4wQlzA%2FMm\"}]}\r\ncf-ray: a0d9d0ce6ffe5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3739,"size_decoded":2265,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79b1b46b6609cfb200a845d186a4bd62","sha1":"8d65ce42eb0b3ae30e367db942849d55a58ae4e5","sha256":"44eb37cb71b7e5bc0f39d8f030dcde80db60544b1f2cb3e62a89c684d107fefc","sha512":"3bc573e38ce7006b7d795bd16783812d0d838e86c653ff53337d98e8b4076df279e5033600b55fa7907aea4deec0e406602e8bc4440f8433c170c767017f3b7e","ssdeep":"","tlshash":"207197fe97f4c6e4fe10c762a851252d3607437af537c99c82184eacbba449ca8458c9","first_seen":"2026-02-01T05:35:27.99094Z","last_seen":"2026-07-22T21:33:06.643587Z","times_seen":104,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/validation/imgs/flags.webp","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.236Z","timestamp":1781780692236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /validation/imgs/flags.webp HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sur-coffrevance-ia.com/validation/intlTellInput.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=4,i\r\netag: \"6a227841-400e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5h7Pp26KSsxLqRM554R7FfaHMRHiTfwvR7M%2F5EyfIIvb8t1gwh4EEYCDcUcAUQxnwtTB0%2Bi1aFpRCV%2FGo6RN93gfpIUbX2t1Df%2FuaGEKWb9egMfZhMz2Mun5UvXzYzAnrsw8f6AUCbG\"}]}\r\ncontent-length: 16398\r\ncf-ray: a0d9d0ce78115ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16398,"size_decoded":17140,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e04a429f047bf49a416645746b6ab9ee","sha1":"81f328617acadbd6fd07ab50977feffa2da3efca","sha256":"760f6774dabb35d9d7cdfb1c748ffd5e37eacf2c2dd4e750b53e66e3b9246ac7","sha512":"06dd1ace2a0776c044f5d8109db05e4fc4ee1d5b676a9da24b7178288f8baae7efc67232370baf3eba849789a93e5c92675354e6ec750fa452b5f8238252642b","ssdeep":"384:CpLvGfOAKQ6wUyvTOaqso3jEAgjZ50AxMD5enKY/M:27DQWUTPqso3YfZ5HCLYk","tlshash":"ea72d08d72fc585cfa36d9021277b18da086ce24b576d9394ac3f985b4b3c98f5cc492","first_seen":"2025-11-06T16:28:10.856082Z","last_seen":"2026-07-22T21:33:06.6264Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/rating-pp.webp","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.068Z","timestamp":1781780692068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/rating-pp.webp HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=5,i\r\netag: \"6a227841-972\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLWW8gJI6cnP77kpeatNJR2Xkxk9E%2BYqq5S1R7mCOAIaN%2B7zDXg0ad0Euv5VhbmK0sPqYT3X%2FdlqyybQljObtxDL4rDVfQi0VaY77vcjbljW2nSqGpiJGYm%2BTuLfapgE6kaWsk2J%2Bz%2Fp\"}]}\r\ncontent-length: 2418\r\ncf-ray: a0d9d0cd7fd75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2418,"size_decoded":3162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecbfd9b2102df0bcbb14d9acc7e7287c","sha1":"125335a93ea3e114508002341f179497c5e27c2f","sha256":"ae280ad98a0105059fb781e96b09b40559b11c2bcd3367f6410ebd0379924e92","sha512":"22f56b4ad73f3673c4131e0fb8ebea0e6d42a304765819fdfb54ade5867e34b7fe60cd192214bfda0c24a0ec02bebd02592e178b1269a00315e133be7c715f7e","ssdeep":"","tlshash":"70413d44cef6ecf38db6ec6bd1365a727226dee51a75cd7600d18d20c07963149d4500","first_seen":"2026-02-01T05:35:27.996355Z","last_seen":"2026-07-22T21:33:06.63819Z","times_seen":104,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/fonts/RobotoCondensed-ExtraBold.woff2","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.167Z","timestamp":1781780692167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-ExtraBold.woff2 HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sur-coffrevance-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\netag: \"6a227841-1010c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fxa1qZCKZZnya50nRjqdRj3GUPccXjV0nylYvy4NAtBPvwVmTogFS0lmR8W4PCUtpjZK0xWcJ%2FatZ9bHswGc7BjZVkr6Hz4xYZ4sGpclFpvsJ4trPw023ZnsR4o6rQo%2Fg5Y8gaMNjPln\"}]}\r\ncontent-length: 65804\r\ncf-ray: a0d9d0ce1fee5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65804,"size_decoded":66546,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65804, version 1.0","md5":"53069609c1d8fa3047a0c102c5391c2a","sha1":"2c4110fbf89c85ebcadb7501b9e52402824db4dd","sha256":"fb6a5fc89213242e7024a41384ebc611d31a9d7da67867c25bf033c7bad44174","sha512":"321d7f90a43c75fec00f503dfa27ac8e8fa089ba13f91007895ca2749df49dae9ca3f220abb7c96dcf922c710cccf8d3b56b31e04084a149421dc91bedce896e","ssdeep":"1536:b2n+VaO4AWR/0tMgc4jhgQhZboogEbg9X6eHGnD2vhj7e:bAwaOW9gc49RhZbooiMeOKvhjC","tlshash":"3f530190cfc2d39be6b02a375831ae4c2ed21d1bd82a7e9291fae446f4274e65490cc4","first_seen":"2026-02-01T05:35:27.976591Z","last_seen":"2026-07-22T21:33:06.640769Z","times_seen":103,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/validation/intlTellInput.min.css","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:51.837Z","timestamp":1781780691837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /validation/intlTellInput.min.css HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-3bfe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h92D5dD3L%2BxMC2I4oD4bxZTPpgUlUqWj%2BphCu4NgUd%2FRN%2BBNR0Kyl7jgfSXzAY%2B%2FA9bdt6yqC1UL9xkTdBnkdcYyaB%2BLONQEJ5taFhcVLmLgYm6Pok4IODvEV5sK3JQjVzsDPdm5ZVOJ\"}]}\r\ncf-ray: a0d9d0cc0f8e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15358,"size_decoded":4160,"mime_type":"text/css","magic":"ASCII text, with very long lines (15358), with no line terminators","md5":"27f3ca4ca9a401438a0ce7df6b4fdb75","sha1":"ddf04596ee636e5af007dd41f26d224157612207","sha256":"504af9f2b61d09f92ce112c6a35100f32fcfc456a0e7e701a31a1ff1e71627b0","sha512":"68a83d4fed5935da504ce784fac4276b8ab3598a25497306ebd1b8f36205f9a826537d6540396ac9cbb97596e10b61e57b6f437be5f2900bd83f916ea89e48f5","ssdeep":"192:eRjvqrrF59XnX/zSuOhOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKaJWRCl8:F93vIhOEM7egCl8","tlshash":"9862a8130308953ee716c1397072d5fd3fbfab4178d6cad5e6c8821f988798089aba59","first_seen":"2026-05-06T12:51:42.484911Z","last_seen":"2026-07-22T21:33:06.617882Z","times_seen":66,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-5P6HHTBL0E","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.036Z","timestamp":1781780692036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-5P6HHTBL0E HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\nexpires: Thu, 18 Jun 2026 11:04:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149360\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424484,"size_decoded":149964,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"f6f947f4d5007df31f0f35b06c366bb4","sha1":"ebbb182109834bf7fe2a8ccdb112d16a35a13a5f","sha256":"7c762cfcceaf8ff4b549ad1c811b2d46c1c5edd846af614da859c43a096046a8","sha512":"914e2ec9bfc0484accc8c8028d6ef656ee2137b8cc3d1432782fab9686c1e5a73b3c06164aa71b203539097939dbd8b6b7a618eaffa71b7cbae47cbd0de8b912","ssdeep":"6144:wjVy5DAFmvq/uYJycf7paX9Z08hdAYOyuInyBLJ81oK:gYO/uYy86+4","tlshash":"2794f9cdb3da74629392f478503f018ba17a69e2f448c899f186ccd42e746998277f7c","first_seen":"2026-06-18T11:05:19.628817Z","last_seen":"2026-06-18T11:05:19.628817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":36,"receive":43,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/js/block-cards.js","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.046Z","timestamp":1781780692046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/js/block-cards.js HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a227841-214\"\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTS7gwL0dHjV7rQhaf9zcp86dNtXB%2Fo%2BdYoAamm5n%2Bzp7t5FqKPLP0EvS7IgjzjQeQaU3F9ME%2FScmNJfpCkxdrOPeiA7utDhX4MUirMR5b0Zpln3wEzOAFS9Za8xv9KCD1HUzVcC7%2Fjn\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d0cd4fd15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":1019,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c79a6e82ca664a022fe0ba27a3aa92a1","sha1":"5456648e933a8fb5764c05c00687af8dd2d4cabb","sha256":"710ab8e8b52be5f2338f028f9e60c41b7228905970305f20a55b9edb3776307b","sha512":"637c4e582589f43468f8c2f63a25e115e21408f2b9fe660ac4d0f752072275ff3d99576843d198df00919c7a9e3f0a2f95fe154d82fedd1bcfc40cd0d74ce7e3","ssdeep":"","tlshash":"7bf0e51700b05031515b203d4aeee649b7e490036808ba11b98c4109efd9b7a65f65c9","first_seen":"2026-05-29T11:19:07.308261Z","last_seen":"2026-07-22T21:33:06.61177Z","times_seen":34,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.067Z","timestamp":1781780692067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-48d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl1QicRzk3EAIDU5XE71lOt5WPwvOXFeyGeALX7NQ%2BV9jf74PaU9qRj3rDsRyonFsNYPph2sgtxNqq5HCWouTozlPl3IQzhDYnS2nWqZmuIzMK3BRKLWu49LhEtP8HyS7xnh3%2B8Ogk3m\"}]}\r\ncf-ray: a0d9d0cd6fd65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ecc52ba801200f4e6e07bce14f5b2c0","sha1":"22f3381961dda0a6f700233be04ab2e1dec173aa","sha256":"476889f1bd277c069ef21987bc4af168c0cf339d1f1c775ddcae5af482c7460a","sha512":"e059f288819e5d94ac593d24e90948529e4e8ab7541deac613b50833e008235c2a3ad87b72ab9bcc5fea6192114179242ee0cd58108273bec7c36530d0372af5","ssdeep":"","tlshash":"77216b66b22ca418d32383ce224638e9303fa0ea771603c4c5c42e6f96646c61c3f6dd","first_seen":"2026-02-01T05:35:27.974168Z","last_seen":"2026-07-22T21:33:06.648646Z","times_seen":102,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sur-coffrevance-ia.com/assets/img/nansen-logo.svg","fqdn":"sur-coffrevance-ia.com","domain":"sur-coffrevance-ia.com","tld":"com"},"ip":{"addr":"172.67.193.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sur-coffrevance-ia.com/","date":"2026-06-18T11:04:52.223Z","timestamp":1781780692223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sur-coffrevance-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 06:11:06 GMT","end":"Thu, 03 Sep 2026 07:09:54 GMT"},"fingerprint":{"sha1":"5A:18:80:9E:44:B6:FC:39:FB:DA:92:82:8A:A7:B2:78:9D:23:49:E9","sha256":"66:71:83:F6:C7:C4:9F:82:68:BF:EE:69:1C:A0:B4:9E:65:F0:D6:23:8C:2D:72:1D:18:96:7E:55:74:9E:ED:B7"}}},"request":{"raw":"GET /assets/img/nansen-logo.svg HTTP/1.1\r\nHost: sur-coffrevance-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sur-coffrevance-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:04:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Jun 2026 07:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a227841-7650\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JNExNrHbdpWoFV87Cwmg9iC%2FhhFFXZZodjouvcf2LKnkyztV8SCUdLJ7O4m4AQ6Eh06EcskaM2lkeewsyUpmPoFiPid63ncg0I16vSV%2FhvTgcBV5kjXzTmpcxpnfhlaNCvSImrMkF2K\"}]}\r\ncf-ray: a0d9d0ce68045ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30288,"size_decoded":21661,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c92487a071ec8e517841d889a171d30e","sha1":"1b3711a1fd64d38374b60426b0202c7440216a3e","sha256":"546847d1e6ac7d68a88d48eaa30654ce3db328d647677611e0b7244208de0100","sha512":"b9eec3ddab5533900f2fe20fc4eec9d16f6f7beb828584f5f937e89c00c1f3c3facca900cb9d49adedb579d7f382d50215bd9dbd7cd9374d612a61ac1df92596","ssdeep":"768:QXhUJYmWWUkWhMnEED38PJtr0YeZEAFCNFbx:QXhUJT4M5D30JHemAFsFbx","tlshash":"9bd248622883cfbeefe54c20f656edf6ed6228ddc09b9148da1511614ba6240d6c0ff0","first_seen":"2026-02-01T05:35:27.994907Z","last_seen":"2026-07-22T21:33:06.610661Z","times_seen":104,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"sur-coffrevance-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}