{"report_id":"4c8e503b-f4ef-41a6-a552-80e0bbd02282","version":0,"status":"done","tags":[],"date":"2026-09-17T03:35:58Z","url":{"schema":"http","addr":"docuposte.secure-mailing-service.com/i/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"title":"Docuposte - Rétablissement de la connexion","dom":{"size":11888,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1230)","md5":"75a4e7dc92106f34a0e80e4a764687cc","sha1":"3063b6a90a3ef354705ab3d197210d7f6ef76182","sha256":"41793e8811fbee1b6f3006661ce08ab671aeb38af8645b833427dfef8bb32a5a","sha512":"dcb208ced201574d92567700b3465f96afeb0ff162b1990f01f60698dab218685ffc21ea27c1f9aa7ac2c31bdc7aaf086471f8d9425b2c7bc39d4a6888329814","ssdeep":"192:cUDkkzu2zsDxgsK+CwYF79Vhsg1F3FtYGu5lgFNFC/eEgMpURdJQeMSj8bOwwAI0:cWWS9Feg1FmsMSj8KWRt","tlshash":"9532c75659b30c02651390e8bff39b8aa664d103d105cc68beacb75ccf8eae5c853b4c","dom_hash":"domhash0055825fbe9ab30eec09949e82869111","first_seen":"2026-09-17T03:36:02.809693Z","last_seen":"2026-09-17T03:36:02.809693Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"docuposte.secure-mailing-service.com/i/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:35:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"secure2.terranovasite.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2001-10-31","domain_rank":1608672,"first_seen":"2021-09-16T07:31:43Z","last_seen":"2026-07-02T08:53:04.073677Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":629,"comment":"","tags":null,"fingerprints":null},{"fqdn":"google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2026-09-15T01:55:05.247579Z","alert_count":0,"request_count":3,"received_data":58435,"sent_data":2078,"comment":"","tags":null,"fingerprints":null},{"fqdn":"docuposte.secure-mailing-service.com","ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2023-07-07","domain_rank":0,"first_seen":"2026-09-17T00:12:09.225661Z","last_seen":"2026-09-17T00:12:09.225661Z","alert_count":14,"request_count":14,"received_data":788693,"sent_data":8262,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":4,"received_data":1781107,"sent_data":2144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":2,"received_data":81882,"sent_data":1108,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jquery/jquery.min.js?tn=267219452619","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-10-11T11:53:43.685259Z","times_seen":22668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jqueryui/jquery-ui.min.js?tn=267219452619","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef00d1c5bfbf8be17a16477dba6084d2","sha1":"1c320ee8eb33f1e6c2e640c8b257aca7851eecd4","sha256":"df4b73e14c40c6e48a78d78ff52d0bbe83cd2febd9e5dd256d7fd3b5981d4567","sha512":"94f2c5a22d356672c5ab22711a82e245624cc28df3c60282217f22960c269fbe756372ad5f477373be360ee798bf37e52e3f8923513cfa8eab9f14a18924c8f8","ssdeep":"3072:/vuPSaSvN5zbbD1JutlnU89uDTXXpmuz10WsOLzW5xwGfZbMus1E:O26lapqkLSDRIuD","tlshash":"9934f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":252962,"data":"","first_seen":"2025-01-24T09:30:16.682661Z","last_seen":"2026-10-11T08:13:19.115659Z","times_seen":322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/js/userInteraction.js","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","size":2276,"data":"","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-10-08T18:14:10.586059Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-10-08T18:14:10.592552Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-10-08T18:14:10.593071Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-10-08T18:14:10.593546Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a65853eed0a403bb5979c681a538b07","sha1":"8c7f130fc3f03382cb7f980cd3f62cb323b71d5c","sha256":"dd1b5dbc5e7b4e734e56cd356892f47f604df079074202f97bd4826d78f85799","sha512":"cdab6dab83ed4df9f7eec1c6635a6e89ed48982576d4a41c70d03bff2e6b3316833ce2e3f55fa3e7509b70e938511bbac03498d1e5f58178ea5cc82d3a0f7a88","ssdeep":"","tlshash":"c4316c6770b709334abfb1bd074b8b847471800b0041de55be6ccf886f2bdb68a5175a","size":1477,"data":"","first_seen":"2026-09-17T03:36:02.839558Z","last_seen":"2026-09-22T01:15:47.846471Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/js/recaptcha.js","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","size":2125,"data":"","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-10-08T18:14:10.580529Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-10-09T21:17:40.038578Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb548ffd3c391bb0954dc1f0a0deb01d","sha1":"27ee4a2a8a66d55cfb063f8295f983000edc479d","sha256":"9d4840c13d2d7e52290fcf57a76686b846d70fc68709b0323a37fb6ac7fd003d","sha512":"75c0804af8554ae8c3ba0cddce3cbe66ca93ead395f15574f01df5730eaa9b28fe9509d3c57fcab37d40df28cfa083cea27ef1220435f4bed67340fe215a4ccb","ssdeep":"768:5Zc9n9Wh8+d+zEyWIZ8mlx+k6ydVAoHjts1ywD2+h033vZ/wuKhkA2o:oE0zEnISml4ydVAMK1PD2+h0hwuKr","tlshash":"edf29d2ee815a8e7efbe4bf01ae117c4647c41964a5f106c34fe15cb2a629c7784b1ec","size":36226,"data":"","first_seen":"2026-09-17T03:36:02.844304Z","last_seen":"2026-09-17T03:36:02.844304Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/bootstrap/js/bootstrap.min.js?tn=267219452619","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39685,"data":"","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-10-11T05:31:43.075117Z","times_seen":2564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fc25957a2e4569616ca6102016370f2","sha1":"8897c0977d9c07352e0c5ba727a2666028dff0f1","sha256":"5739ed3fc3c0b06ec79e72cdfaf4859fa2a22f7f8784843e18645e45ca92111f","sha512":"1dd1fe2c6a93cda065f555c986760d51fee157f6fc5fbc2a899472d77ff7fb902aff7046afe5bea324e4150bf95b39de19ecb309e902332714f1512d015a6f2d","ssdeep":"","tlshash":"5b1165b70504a0354f3209d1e2ffcbb5e842701cf15889ecd815dac52e69dc7ce05a81","size":1006,"data":"","first_seen":"2026-09-17T03:36:02.824425Z","last_seen":"2026-09-22T01:15:47.830136Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","size":846252,"data":"","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-25T09:39:18.075475Z","times_seen":3709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"599040272c12d94939ea48a5a91e7724","sha1":"aab2913be903f4d6c9e752374cd46c06b35f180e","sha256":"b5e1c42dbc11ff59dc66882df55d760cf9e7948a54abd9011eda51044ebb0ac5","sha512":"dffa6e564768b4eafd699d070f1253cbf014e6bc4c4476da2a16132386bcf861db4a2915f67a3eff292d1e97e550a6dabd1fdf2ae98522abd38fe5575843468e","ssdeep":"","tlshash":"ecb012670550cc1c0c000142e5379bace0019038fb9091f140381fe412a4673c205d40","size":102,"data":"","first_seen":"2026-09-14T19:29:34.24791Z","last_seen":"2026-09-23T02:10:45.550273Z","times_seen":3018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:26.097Z","timestamp":1789616126097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1 HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 17 Sep 2026 03:35:26 GMT\r\ncontent-security-policy: script-src 'nonce-SH9Lh1lDpkzy30SIDh2Jmg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54751,"size_decoded":29542,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36232)","md5":"b28ab7f50f4c08bc819a6d338e8843d4","sha1":"3036f8ee1270c1a5260720094e886ac653d01d07","sha256":"84d6ded6305dcbb907b17c77a2e536230e67c36956444a36ad28a3086b5c1418","sha512":"4febb005655d1f59ccbd90fd1aa62c5c03731c8322361937b5a9cc51f189c8127535158cf2d3db0d2112e0386a16773d6477e048ba2ce2add3cd348a5946fa79","ssdeep":"1536:y+klcfXE0zEnISml4ydVAMK1PD2+h0hwuKi:y+klcLirmPdVmN2+hUtD","tlshash":"9f337b1548035442dba74de123da3fb0fe2d8241620a90b877fd179baed7c97a16a3dc","first_seen":"2026-09-17T03:36:02.812493Z","last_seen":"2026-09-17T03:36:02.812493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:35:25.229Z","timestamp":1789616125229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/i/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 4376\r\nContent-Type: text/html; charset=utf-8\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":10871,"size_decoded":5646,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387), with CRLF line terminators","md5":"2c188eb5bff44bb2f1e9ac33f91af060","sha1":"c323686c908a2060ede285b4536cd9b9df189e3d","sha256":"53aeaddf963b8e307273bccf5231ae4a2ce563b211778ee096c31f23b5fcf9e8","sha512":"5eac5caabcdf8fc107e0aecbd52d2a0a4a851593c6fe55f5ddb6819b57a569e96154c468d7b455898ef4d33372f2fe9e585b324852b7fd1dabad9664e88cb3bb","ssdeep":"192:QFaqVv4gNnAxVyS840VgsBkq/9EBsvfdcWMmhzdtQlM/G1wiNxu:Qkuhg8AM/Gi4I","tlshash":"a522952a95420c425333d1a4abb1979deb6401438701496cbeeca74b8fbe9a48963f9c","first_seen":"2026-09-17T03:36:02.814291Z","last_seen":"2026-09-17T06:42:55.28893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jqueryui/jquery-ui.min.css","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.459Z","timestamp":1789616125459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.min.css HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 7432\r\nContent-Type: text/css\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"8091e89b4919dd1:0\"\r\nLast-Modified: Tue, 21 Jul 2026 19:46:23 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":30152,"size_decoded":8669,"mime_type":"text/css","magic":"ASCII text, with very long lines (28555), with CRLF line terminators","md5":"348b10744ceb3125ac4dbf7d5af997c2","sha1":"c37ab61debf3e8bbb3e9c930ae9488d4739b8f96","sha256":"b5023117b43b6a2e417a176e290e83f69f68ed65ef168bcb74fdff43b807283b","sha512":"fb9f3fa53645d64f2c0f16eacdf224600977abb5fe54f0186cc1c6d9fdcecb93b80d09e92816c25c5e0283ea5fe82768496d878933afccab60c5fab6cba693f0","ssdeep":"384:zK5588nOXHi11efBMzymUUC6G/zDMSc7nfZBhV2:zDXHiKBMznUUC6G/zDMBhQ","tlshash":"c5d25130a4c2252dfe33d23061e11ef4523bc242eda65fbda09af65943e98e4c57b971","first_seen":"2026-06-17T16:32:26.365134Z","last_seen":"2026-10-08T18:14:10.584176Z","times_seen":21,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":33,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/css/rp_tooltips.css","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.465Z","timestamp":1789616125465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/css/rp_tooltips.css HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2514\r\nContent-Type: text/css\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"070e32e5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:36 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":13532,"size_decoded":3750,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b2f2bce67a3c4ab9b0f17372f010918","sha1":"eb379f291a848680ddd5d3ecb4e59818f9a602e3","sha256":"9bddcf9a5fc7baf7e7bdfe849437591ee53dca4206b1b8af6a705ada50fbadba","sha512":"0c6ddfcdb4ee038c98c1eb9faa6af8df0d55bd5f74704f2ab51b20e6c107b8757be11640fd5753c4a955a64e451fff661357c2c61c769ed9b6209416bf9bcb27","ssdeep":"384:yxiQ952UOM7FEOBO57QNZhgfR6H9CWXkOX:s52UOM7FEOBO57QNZhgfR6H9CWXkOX","tlshash":"6152755ade1220825333d35cebf20754eb653023ca824479faec619ddfb8758aa51fc9","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-10-08T18:14:10.587063Z","times_seen":165,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/bootstrap/js/bootstrap.min.js?tn=267219452619","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.472Z","timestamp":1789616125472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/bootstrap/js/bootstrap.min.js?tn=267219452619 HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 14365\r\nContent-Type: application/x-javascript\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"24486c2f5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:36 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":39685,"size_decoded":15619,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39553), with CRLF line terminators","md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-10-11T05:31:43.075117Z","times_seen":2564,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/js/recaptcha.js","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.476Z","timestamp":1789616125476,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/js/recaptcha.js HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1062\r\nContent-Type: application/x-javascript\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"815f7c2f5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:37 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2125,"size_decoded":2315,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-10-08T18:14:10.580529Z","times_seen":94,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","date":"2026-09-17T03:35:26.228Z","timestamp":1789616126228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42355\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 19:03:31 GMT\r\nexpires: Tue, 14 Sep 2027 19:03:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 203515\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43202,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7a6d902a0adcd7c9223bc3457d32a41","sha1":"a8edb18d3034cd30504e947ca68ebef437c7b706","sha256":"8266c6122d4a35954f3142697506efb503322c0470d3863c9e759e2e2295e5cc","sha512":"a49bba8e98fd71591b08e158dfa5e500f0bc0b5de853ed672f9769c3be6a813dfbee5c88c5bfe8484943f4b624aa09ed07f2a41e4b4d03b9541455ce662ed4fd","ssdeep":"1536:n7Rpgh9C9ToL9gTNfWNfK4RxXnHZzhXwWx7W1bx7:n7ArC9ULiTYNC4Rv9Xi","tlshash":"85838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-14T19:29:34.239267Z","last_seen":"2026-09-23T02:10:45.492575Z","times_seen":3346,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","date":"2026-09-17T03:35:26.478Z","timestamp":1789616126478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 17 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 563104\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-10-11T12:43:11.23016Z","times_seen":744020,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/i/d7c0aacb20c724345923f1bcf68ffb45c","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:35:22.432Z","timestamp":1789616122432,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /i/d7c0aacb20c724345923f1bcf68ffb45c HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 345\r\nContent-Type: text/html; charset=utf-8\r\nDate: Thu, 17 Sep 2026 03:35:24 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T12:43:34.847605Z","times_seen":19027197,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.478Z","timestamp":1789616125478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Thu, 17 Sep 2026 03:35:25 GMT\r\ndate: Thu, 17 Sep 2026 03:35:25 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1006,"size_decoded":1315,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1006), with no line terminators","md5":"0fc25957a2e4569616ca6102016370f2","sha1":"8897c0977d9c07352e0c5ba727a2666028dff0f1","sha256":"5739ed3fc3c0b06ec79e72cdfaf4859fa2a22f7f8784843e18645e45ca92111f","sha512":"1dd1fe2c6a93cda065f555c986760d51fee157f6fc5fbc2a899472d77ff7fb902aff7046afe5bea324e4150bf95b39de19ecb309e902332714f1512d015a6f2d","ssdeep":"","tlshash":"5b1165b70504a0354f3209d1e2ffcbb5e842701cf15889ecd815dac52e69dc7ce05a81","first_seen":"2026-09-17T03:36:02.824425Z","last_seen":"2026-09-22T01:15:47.830136Z","times_seen":10,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":3,"connect":36,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/media/d/cmedia_05175ca0547d4d70a7a6b0cf8b43df0a/DocuposteV.png","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.483Z","timestamp":1789616125483,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /media/d/cmedia_05175ca0547d4d70a7a6b0cf8b43df0a/DocuposteV.png HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 96199\r\nContent-Type: image/png\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=393\r\nExpires: Thu, 17 Sep 2026 03:41:59 GMT\r\nLast-Modified: Thu, 17 Sep 2026 02:41:59 GMT\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96199,"size_decoded":97506,"mime_type":"image/png","magic":"PNG image data, 405 x 526, 8-bit/color RGBA, non-interlaced","md5":"f0a3d3e8e1b3748ff88331f78c0971a5","sha1":"0cdd7581f1b1d6a5b2b52ca49ac0575c2d089358","sha256":"06385b09c7266dd3b4f9e9d7b7ed11b83948cbe2eb19ec58ce8db2c7ae52b63e","sha512":"f69df9c9258d6d2d1ba70030d35eaf00f1a1aaddf34b975ab5f8802ffed81d353ff78836c5d554f059a94a3c4a616e6c4cd1801ed07c30619f758951a53c97e2","ssdeep":"1536:okV7Y/c58mym64oOl8b6l9hyXR7usUuLjA3FDVcfUR6isgL0xdOcL4bCz7:/VMoHxP82lLimus5cUkis7LL4bCz7","tlshash":"4c93126bc31e4518958f36d9e58722d97f07c65f3decb88883a9df11a1aacc1da4084f","first_seen":"2026-09-17T03:36:02.825494Z","last_seen":"2026-09-22T01:15:47.830772Z","times_seen":5,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":35,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","date":"2026-09-17T03:35:26.605Z","timestamp":1789616126605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:49 GMT","end":"Fri, 27 Nov 2026 08:04:48 GMT"},"fingerprint":{"sha1":"6D:8E:E3:8A:DF:44:FA:74:ED:5B:85:40:60:06:5A:63:B6:08:5A:8D","sha256":"0E:75:68:E9:92:5A:62:3C:49:65:DA:A4:6F:14:24:90:A0:4C:FE:71:77:99:0A:9A:3D:64:F4:15:CA:CA:43:66"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Thu, 17 Sep 2026 03:35:26 GMT\r\ndate: Thu, 17 Sep 2026 03:35:26 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"599040272c12d94939ea48a5a91e7724","sha1":"aab2913be903f4d6c9e752374cd46c06b35f180e","sha256":"b5e1c42dbc11ff59dc66882df55d760cf9e7948a54abd9011eda51044ebb0ac5","sha512":"dffa6e564768b4eafd699d070f1253cbf014e6bc4c4476da2a16132386bcf861db4a2915f67a3eff292d1e97e550a6dabd1fdf2ae98522abd38fe5575843468e","ssdeep":"","tlshash":"ecb012670550cc1c0c000142e5379bace0019038fb9091f140381fe412a4673c205d40","first_seen":"2026-09-14T19:29:34.24791Z","last_seen":"2026-09-23T02:10:45.550273Z","times_seen":3018,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob","date":"2026-09-17T03:35:26.654Z","timestamp":1789616126654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 19:05:55 GMT\r\nexpires: Tue, 14 Sep 2027 19:05:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 203371\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354514,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-25T09:39:18.075475Z","times_seen":3709,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jqueryui/jquery-ui.structure.min.css","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.461Z","timestamp":1789616125461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.structure.min.css HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 7432\r\nContent-Type: text/css\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"8091e89b4919dd1:0\"\r\nLast-Modified: Tue, 21 Jul 2026 19:46:23 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":30152,"size_decoded":8669,"mime_type":"text/css","magic":"ASCII text, with very long lines (28555), with CRLF line terminators","md5":"348b10744ceb3125ac4dbf7d5af997c2","sha1":"c37ab61debf3e8bbb3e9c930ae9488d4739b8f96","sha256":"b5023117b43b6a2e417a176e290e83f69f68ed65ef168bcb74fdff43b807283b","sha512":"fb9f3fa53645d64f2c0f16eacdf224600977abb5fe54f0186cc1c6d9fdcecb93b80d09e92816c25c5e0283ea5fe82768496d878933afccab60c5fab6cba693f0","ssdeep":"384:zK5588nOXHi11efBMzymUUC6G/zDMSc7nfZBhV2:zDXHiKBMznUUC6G/zDMBhQ","tlshash":"c5d25130a4c2252dfe33d23061e11ef4523bc242eda65fbda09af65943e98e4c57b971","first_seen":"2026-06-17T16:32:26.365134Z","last_seen":"2026-10-08T18:14:10.584176Z","times_seen":21,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":33,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jquery/jquery.min.js?tn=267219452619","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.470Z","timestamp":1789616125470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/jquery/jquery.min.js?tn=267219452619 HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 39744\r\nContent-Type: application/x-javascript\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"7248792f5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:36 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":40998,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-10-11T11:53:43.685259Z","times_seen":22668,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":36,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","date":"2026-09-17T03:35:26.230Z","timestamp":1789616126230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 19:05:55 GMT\r\nexpires: Tue, 14 Sep 2027 19:05:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 203371\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354514,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-25T09:39:18.075475Z","times_seen":3709,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","date":"2026-09-17T03:35:26.492Z","timestamp":1789616126492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 11 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 494578\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-10-11T12:43:11.162491Z","times_seen":1021148,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":17,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9kb2N1cG9zdGUuc2VjdXJlLW1haWxpbmctc2VydmljZS5jb206NDQz\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=s6437pg7opn1","date":"2026-09-17T03:35:26.494Z","timestamp":1789616126494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 11 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 494578\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-10-11T12:43:11.162491Z","times_seen":1021148,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":31,"dns":1,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/bootstrap/css/bootstrap.css","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.458Z","timestamp":1789616125458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 23025\r\nContent-Type: text/css\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"070e32e5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:36 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":173441,"size_decoded":24262,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"cb7bd9e2b45319f4e7c2e613b8f6c0e8","sha1":"6175c12bf84a28c6a281ab923752481b6fe58056","sha256":"2797160125a75dddc44d8cbee398bad6770dbfe2f57479ca65c3f4142e1a9df0","sha512":"dcdc72d350803257cfe7729215a4b3ac99ad9c6cdd04d466b570eea3cde3f5225d82ffba496ee7f171dc65650314fa95f2a4132840ec74c9cf060027295fc9fa","ssdeep":"768:yER2n1QySUVLqqkXZTMegYFomDquiMRNTHU44DMIMETn5VBKCkcuZGB2Vcx/cXiC:Wn1QyiLZGB2VKcXihoiL3yFITMK4fWS","tlshash":"0504769de60131c22633d768bba38d42ff062263c606c97abfed62544fb94545631f8e","first_seen":"2023-10-13T13:05:14Z","last_seen":"2026-10-08T18:14:10.59006Z","times_seen":407,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jqueryui/jquery-ui.theme.min.css","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.462Z","timestamp":1789616125462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3029\r\nContent-Type: text/css\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"8091e89b4919dd1:0\"\r\nLast-Modified: Tue, 21 Jul 2026 19:46:23 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":17579,"size_decoded":4266,"mime_type":"text/css","magic":"ASCII text, with very long lines (1167), with CRLF line terminators","md5":"041102305ea0b4bc2a2d26a810a6e2de","sha1":"e4cd1e52191ef29280ce7dc7f4333af6d28f30ac","sha256":"d1ca952850154bd34e432aa1ca1a5a9c03bf0109e83ec5fbd7954ad2220c1831","sha512":"6194280e425a621b98f94e34d3722ddb9a826891b79447abfba51ce8a7f8ab444a2544121de4fefbd2f0c2b36e7506de535fba7e019e29a703db37c008f635c5","ssdeep":"192:9UGFANbXbr24ajTuzQfP/Wq3htvB2RctPLL4fbvCGYdV79a3vRORkFfpN:94FRTfb9p","tlshash":"d882f8a59b43310dbb4bd220f1e2abf2c53e2341fc57de6e54ab259c51d18e1c42bab1","first_seen":"2026-07-23T22:26:06.93175Z","last_seen":"2026-10-08T18:14:10.585021Z","times_seen":18,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/css/rp_bubbles.css","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.464Z","timestamp":1789616125464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/css/rp_bubbles.css HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2399\r\nContent-Type: text/css\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"070e32e5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:36 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":12677,"size_decoded":3635,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"e9b944b679bc0716e7c506ac6684ba28","sha1":"b7d753886ac0e8aa16f792ab354025f60376516e","sha256":"4bc5a823bc0d699486b8da7c703f02935d4e050fdf7e139ca77c6e744f9899f6","sha512":"50362fa9c95e04b2e32eb154429ca1d30e1777120d47d8f64f0b177bf47739bb53c7369eac6cf7888f3ad94bd885ec8eb8980b90214e56c181f507da2fdeddcf","ssdeep":"192:yxN1jBGISrhFui5bAmhfQYquf2ssl1eFSm5TvzSFUMGTyjsDt5E2YeFdpOHej:yxHjBcFFAmhJYet","tlshash":"8f42f1b8e50122095317dac7abdc4aede6945013be0b3694b5fc143fabcabbc0e614c5","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-10-08T18:14:10.591578Z","times_seen":165,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":33,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/jqueryui/jquery-ui.min.js?tn=267219452619","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.473Z","timestamp":1789616125473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.min.js?tn=267219452619 HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"7824799c4919dd1:0\"\r\nLast-Modified: Tue, 21 Jul 2026 19:46:23 GMT\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":252962,"size_decoded":91642,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (64395), with CRLF line terminators","md5":"ef00d1c5bfbf8be17a16477dba6084d2","sha1":"1c320ee8eb33f1e6c2e640c8b257aca7851eecd4","sha256":"df4b73e14c40c6e48a78d78ff52d0bbe83cd2febd9e5dd256d7fd3b5981d4567","sha512":"94f2c5a22d356672c5ab22711a82e245624cc28df3c60282217f22960c269fbe756372ad5f477373be360ee798bf37e52e3f8923513cfa8eab9f14a18924c8f8","ssdeep":"3072:/vuPSaSvN5zbbD1JutlnU89uDTXXpmuz10WsOLzW5xwGfZbMus1E:O26lapqkLSDRIuD","tlshash":"9934f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2025-01-24T09:30:16.682661Z","last_seen":"2026-10-11T08:13:19.115659Z","times_seen":322,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":41,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docuposte.secure-mailing-service.com/common/js/userInteraction.js","fqdn":"docuposte.secure-mailing-service.com","domain":"secure-mailing-service.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.475Z","timestamp":1789616125475,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.secure-mailing-service.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:56:53 GMT","end":"Thu, 10 Dec 2026 23:56:52 GMT"},"fingerprint":{"sha1":"02:E3:61:11:81:D2:93:DB:E0:2E:FF:AB:9F:8E:6E:32:91:5D:CB:28","sha256":"81:26:6F:8A:47:0C:66:93:21:6C:C0:5B:F5:B1:DC:30:74:E6:31:F6:6E:FC:E8:9A:DD:67:5C:E6:BD:72:BE:2D"}}},"request":{"raw":"GET /common/js/userInteraction.js HTTP/1.1\r\nHost: docuposte.secure-mailing-service.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1181\r\nContent-Type: application/x-javascript\r\nDate: Thu, 17 Sep 2026 03:35:25 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"6ad67c2f5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:37 GMT\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2276,"size_decoded":2434,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-10-08T18:14:10.586059Z","times_seen":115,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"docuposte.secure-mailing-service.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure2.terranovasite.com/Media/tgmedia_61523fa9a9264ca5bcd594f3cb1e72a7/microsoftlogowhite.jpg","fqdn":"secure2.terranovasite.com","domain":"terranovasite.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docuposte.secure-mailing-service.com/page/ef19b62110604d2a8f13453aa9b6e4f5/d7c0aacb20c724345923f1bcf68ffb45c","date":"2026-09-17T03:35:25.484Z","timestamp":1789616125484,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /Media/tgmedia_61523fa9a9264ca5bcd594f3cb1e72a7/microsoftlogowhite.jpg HTTP/1.1\r\nHost: secure2.terranovasite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docuposte.secure-mailing-service.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T12:43:34.847605Z","times_seen":19027197,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}