{"report_id":"4671eaaa-e79f-44f7-9b24-e61b3b4ad922","version":0,"status":"done","tags":[],"date":"2026-08-07T09:05:43Z","url":{"schema":"http","addr":"loginvotrespace.segretob.fr/espace/portal","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":0,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"loginvotrespace.segretob.fr/espace/portal/","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"title":"Se connecter","dom":{"size":12149,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1bb52b933b39ee28dd745bb2edbcd6fa","sha1":"e2acf7411e12596878373390440b66046be8a09a","sha256":"166c90b59cfa7155ecc68fb8656a9eba0e5fdd515580838192fd0eacaa2b7c39","sha512":"f59e6a6b68eee4734fba4e0bcc7243556108a4975797b9f0a19362f62fd0feda9fdb555ac85ad4089cc7c7b232f0b02920173303093f2667a1b7440ab5846a48","ssdeep":"192:97DfSQBBlI+09hFkQc41udbF5dIxoBcGUzDauW8SYdOp2Iu7W/xH3:FediFCrXtspbu7WpX","tlshash":"16422f9a256700467a13e4a42fb71b463261d503d10bca693fdc639ccfca9c99db379c","dom_hash":"domhash1b17fb1dd9440cb5103c2dbc13323160","first_seen":"2026-08-07T01:24:20.264687Z","last_seen":"2026-08-07T09:05:43.806061Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"loginvotrespace.segretob.fr/espace/portal","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":0,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T09:05:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"loginvotrespace.segretob.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"loginvotrespace.segretob.fr","ip":{"addr":"31.56.176.23","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-11-13","domain_rank":0,"first_seen":"2026-08-07T01:24:16.884632Z","last_seen":"2026-08-07T01:24:16.884632Z","alert_count":12,"request_count":4,"received_data":31588,"sent_data":2121,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"loginvotrespace.segretob.fr/espace/portal/","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b20075a4ed98eddc374499a7dc80fbf6","sha1":"94091754759403ac91bdbc45881a52fcf859de4d","sha256":"d638cd01013ecf18d7e6de0bb7ea1730af55005774bfc26c47cc69b26e5094aa","sha512":"d6a54b2d221caffb199a78f0a0f0bcb3a63d6b45a13a163803da5cde9a3ddecc34007ff7d6fd142e3bc778027cc1172e4bda69462b62e357661c21e6b2b8d3f8","ssdeep":"","tlshash":"24217c6b106308604bebb5b6266b2645342180473d02d99d3f1ccb0c2f79e9ba9737dd","size":1401,"data":"","first_seen":"2026-08-07T01:24:20.268976Z","last_seen":"2026-08-07T09:05:43.81993Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"loginvotrespace.segretob.fr/espace/portal","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T09:05:17.028Z","timestamp":1786093517028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginvotrespace.segretob.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 17:26:14 GMT","end":"Wed, 04 Nov 2026 17:26:13 GMT"},"fingerprint":{"sha1":"4C:48:61:73:50:03:91:8D:B6:A2:8C:3E:22:31:F6:12:AD:A1:C9:46","sha256":"0C:0E:C3:09:F2:4C:F9:02:62:F0:89:0B:AF:F9:B6:C8:92:3C:D7:6F:DC:87:DE:99:80:65:6E:34:29:15:82:DF"}}},"request":{"raw":"GET /espace/portal HTTP/1.1\r\nHost: loginvotrespace.segretob.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Fri, 07 Aug 2026 09:05:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 336\r\nlocation: https://loginvotrespace.segretob.fr/espace/portal/\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":97,"connect":33,"send":0,"wait":53,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"loginvotrespace.segretob.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loginvotrespace.segretob.fr/espace/portal/","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T09:05:17.258Z","timestamp":1786093517258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginvotrespace.segretob.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 17:26:14 GMT","end":"Wed, 04 Nov 2026 17:26:13 GMT"},"fingerprint":{"sha1":"4C:48:61:73:50:03:91:8D:B6:A2:8C:3E:22:31:F6:12:AD:A1:C9:46","sha256":"0C:0E:C3:09:F2:4C:F9:02:62:F0:89:0B:AF:F9:B6:C8:92:3C:D7:6F:DC:87:DE:99:80:65:6E:34:29:15:82:DF"}}},"request":{"raw":"GET /espace/portal/ HTTP/1.1\r\nHost: loginvotrespace.segretob.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 07 Aug 2026 09:05:17 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Jul 2026 19:21:22 GMT\r\netag: W/\"6a6a52b2-2f85\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12165,"size_decoded":3383,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d0f7aae28db5c2416a891757d53dd97e","sha1":"1d21bbe720e2468a33e81e9a7480f4cc0524fc4a","sha256":"47513d7f7135d45aa310dc68e918a0b5ddaee6617f83bf2fe78e29226da5f762","sha512":"41e083f2c41aa1c60c5806ba14255aa23b02676d3694f3983c00e2b7063753f8dd54e15d3e0a904e3c7e262cb4f668d026f3585497e99048cde390537e5af819","ssdeep":"192:B7DfSuBBlI+09hFkQc41udbF5dIxoBcGUzDauW8SYdtp2Iu7W/xHNz:TediFCrXtHpbu7WpF","tlshash":"20422f9a256700467a13e4a42fb71b463261d503d10bca693fdc639ccfca9ca9da379c","first_seen":"2026-08-07T01:24:20.265935Z","last_seen":"2026-08-07T09:05:43.81227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"loginvotrespace.segretob.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loginvotrespace.segretob.fr/espace/portal/logo.png","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginvotrespace.segretob.fr/espace/portal/","date":"2026-08-07T09:05:17.478Z","timestamp":1786093517478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginvotrespace.segretob.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 17:26:14 GMT","end":"Wed, 04 Nov 2026 17:26:13 GMT"},"fingerprint":{"sha1":"4C:48:61:73:50:03:91:8D:B6:A2:8C:3E:22:31:F6:12:AD:A1:C9:46","sha256":"0C:0E:C3:09:F2:4C:F9:02:62:F0:89:0B:AF:F9:B6:C8:92:3C:D7:6F:DC:87:DE:99:80:65:6E:34:29:15:82:DF"}}},"request":{"raw":"GET /espace/portal/logo.png HTTP/1.1\r\nHost: loginvotrespace.segretob.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://loginvotrespace.segretob.fr/espace/portal/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 07 Aug 2026 09:05:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 17688\r\nlast-modified: Wed, 29 Jul 2026 19:18:29 GMT\r\netag: \"6a6a5205-4518\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17688,"size_decoded":17938,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b212edf7c87c1e8ba91f73edb6fefda9","sha1":"823ac856cb415b7a2d77b80ad9c5f8739f758d26","sha256":"06f9b6012b03c4aaac98fa965af9e3e052eb00f0ba6bf034753c8a0ab7da6b31","sha512":"44a189512b2bfa9b007752e9b5be0cd1e4ab8398e46335df0b5273ead8d905964ee2a8a5cc783584bdaa5611acbb8c932367ea4264486753d40da63ef0aacd4f","ssdeep":"384:EMTeArJ6gKxlKj+6s5F9uMtC29KReoYkcx1ho37q:E+eok7I+H5CTXYj2W","tlshash":"ad82d07584b16b5dfd3622f53fb82ad9489138fd24225ec1e707fc18439aaaedc5b012","first_seen":"2026-08-07T01:24:20.266833Z","last_seen":"2026-08-07T09:05:43.815454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"loginvotrespace.segretob.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loginvotrespace.segretob.fr/favicon.ico","fqdn":"loginvotrespace.segretob.fr","domain":"segretob.fr","tld":"fr"},"ip":{"addr":"31.56.176.23","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginvotrespace.segretob.fr/espace/portal/","date":"2026-08-07T09:05:17.547Z","timestamp":1786093517547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginvotrespace.segretob.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 17:26:14 GMT","end":"Wed, 04 Nov 2026 17:26:13 GMT"},"fingerprint":{"sha1":"4C:48:61:73:50:03:91:8D:B6:A2:8C:3E:22:31:F6:12:AD:A1:C9:46","sha256":"0C:0E:C3:09:F2:4C:F9:02:62:F0:89:0B:AF:F9:B6:C8:92:3C:D7:6F:DC:87:DE:99:80:65:6E:34:29:15:82:DF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: loginvotrespace.segretob.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://loginvotrespace.segretob.fr/espace/portal/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 07 Aug 2026 09:05:17 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 06 Aug 2026 18:24:13 GMT\r\netag: W/\"328-65864feb73ab3\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-16T01:32:09.579265Z","times_seen":38847,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"loginvotrespace.segretob.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"loginvotrespace.segretob.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}