{"report_id":"57b29cf6-9ba1-4203-94d2-556af9579dad","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-08-09T10:06:25Z","url":{"schema":"http","addr":"caisse-epargne.mdps.fr/espace","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":0,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"title":"Connexion - Caisse d'Épargne","dom":{"size":6261,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (305)","md5":"81226b95bdb8a021dfb0749cf7cf2c6e","sha1":"69c1c38488afe5fcd5a2ca335e2c77d3a3252ecb","sha256":"2cd7550eb427383b8c80a59c8e6a4e9d7d99f8a006603b76a01c1d062cc57386","sha512":"2e0d5c0d70ca0c3190e962d9e20f8cb718bfbd51c6e2043d6d7d464daeead3fcf4f15108db82aeb8f4b45ce489c8f03f9fb6665ae108ffe19beb66400ac9b169","ssdeep":"96:2uQFGvAXmZJqtYapG8R+2I0RyS2MgCroYYjwatnB+7WPn:eFqAXmZJ1aom+n04SV5PKwkB4u","tlshash":"ddd1d82099f9687fb0230095fad7a60a3fd68103c60d8924b5fd18758fcaddac53768c","dom_hash":"domhashf28b1b0f657fb018de6b3f7f7e7d30dd","first_seen":"2026-08-09T01:16:07.090688Z","last_seen":"2026-08-09T10:06:27.590975Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"caisse-epargne.mdps.fr/espace","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":0,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:06:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-09","alert":"Detects file containing Telegram Bot API","trigger":"caisse-epargne.mdps.fr/espace/js/server.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":4,"received_data":196532,"sent_data":2328,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":36968,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"control-list-panel.homes","ip":{"addr":"172.67.174.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-08-09T01:16:02.673339Z","last_seen":"2026-08-09T01:16:02.673339Z","alert_count":0,"request_count":1,"received_data":607,"sent_data":632,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.icgauth.caisse-epargne.fr","ip":{"addr":"176.100.163.229","port":443,"asn":0,"as":"","country":"Israel","country_code":"IL"},"domain_registered":"2009-01-16","domain_rank":815862,"first_seen":"2013-12-20T08:00:05Z","last_seen":"2026-08-09T01:16:03.455874Z","alert_count":0,"request_count":2,"received_data":151277,"sent_data":1208,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"extreme-ip-lookup.com","ip":{"addr":"216.106.188.200","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2016-06-24","domain_rank":19564,"first_seen":"2016-07-04T05:00:32Z","last_seen":"2026-08-05T22:03:37.290116Z","alert_count":0,"request_count":1,"received_data":690,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-02T23:01:36.865069Z","alert_count":0,"request_count":2,"received_data":243264,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"caisse-epargne.mdps.fr","ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2010-09-16","domain_rank":0,"first_seen":"2026-08-09T01:16:02.669115Z","last_seen":"2026-08-09T01:16:02.669115Z","alert_count":21,"request_count":19,"received_data":273590,"sent_data":9209,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Bootstrap:1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/server.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"md5":"093d811f3177d82534182d8acfcf7a6a","sha1":"75b28154bb9cf1c61592abd2fbc173bd7cfcbf95","sha256":"110c5b873ee1c225f1127312e0111690219e0abd9be86eb8f33c195f810d17a0","sha512":"b94eb055e1983f0d34f8db02d14d899a0c9d75fbc23ea9fd00a81183566119546ed8eaaee9568200f329afd7c046e4f4a7863cd74cfa37aaa94dc46e8750f51a","size":55673,"token":"7014993819:AAFDZwTE5E7on9KfNMgyyVwF3KlV3QTBaD4","is_revoked":false,"bot":{"token":"7014993819:AAFDZwTE5E7on9KfNMgyyVwF3KlV3QTBaD4","user_id":"7014993819","username":"Starnewdata_Bot","first_name":"Apple Pay Result","last_name":"","chat":{"chat_id":"-5256201253","title":"Result","type":"group","bot_is":"member","total_users":4,"active_members":null,"admins":[{"user_id":7820518007,"username":"xprov2","first_name":"not","last_name":"G","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e1f6ba71a6776e823280790861d4e8c","sha1":"dd0e712f35c0a58f415fe28bef7c912f4213c79b","sha256":"4e7f2f0865b72d7b6cb1c7bd6ec3cd15aed6fbef9afc697a82a40f1117fd7487","sha512":"2dc4c3fbe91d6f02b58a5733f6299411b7eb86d83fb3cda7fa7d130c1f1f6bb979d24c8a31a1403f820a4acb46c570f4d92260b294d956ec75693fa23ecfd901","ssdeep":"","tlshash":"05f0f62ebad7363558fb253a3fef96882a6540431405d9907c9c9c440f61d909737bc9","size":615,"data":"","first_seen":"2026-08-09T01:16:07.130516Z","last_seen":"2026-08-09T10:06:27.606061Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/jquery.min.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-08-17T06:16:40.443536Z","times_seen":7446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/socket.io.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e44519287f4dea8cfa2cad2684c27b84","sha1":"41f41dedfaa03d689c360116e9fbc107581f519c","sha256":"215c3fe5349dc70cc145cd80a813ff3ab675a4787182f1f588d4a18591ea1241","sha512":"18ac8d6b3fa30cc6e68121aa82fa9651ab97e010c77b1f6b9bacabea162c61de330e55ca46f32452e68ee0e207a6129e17bf54c0ce3f0426337d97478bfc8e47","ssdeep":"1536:1ilLJHcbEgZFPl64AkIPxjEgZFPltqxQ4mmT+9Sr7JFzi6qxKryNcnLsF111x:1YLJHcYR4AkIPxgAqxGf9SLzi6DM6LKT","tlshash":"f573404573e13625879ab1a1dc9f8849b73998ac138a444d7b1cc4f468788bc877eefc","size":80322,"data":"","first_seen":"2025-07-30T13:58:35.995963Z","last_seen":"2026-08-09T10:06:27.59854Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8c90f3fd20c367dcebb42e1eec57111","sha1":"c0c82b8c7106b1897de2ef74a58bf1d2cf574be4","sha256":"3f19ff5d55a35ad3a62522b868007938f5cc6fe81bdbc2a5f2d7fbbcacb07332","sha512":"e8a9c2cbb41b53e2172620b4319c2d0a2c48ba31145b7d4ae2522bd1f134c58a5131b6936abff154f5ace85c777a8fe65884f60757c24a52121afadd04b3ec8a","ssdeep":"","tlshash":"14a002577648293495d1b161916fa7446d77818530426845985785a0282d99c1152c4d","size":62,"data":"","first_seen":"2026-01-11T15:06:31.434497Z","last_seen":"2026-08-09T10:06:27.60694Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18351de1a9d33e2c736e4603f141d5d2","sha1":"db4d636c75cda89d8bc16b73422772a4526b205a","sha256":"a082acaad5e42d1b5d1eed3aad508fb303ad745fcc10e11e28af0911a890f53d","sha512":"5dc4c25f43861d12a58e377bcb652d248230443b1bfc53fb3505a0283cf7b766db35390ab7db2c10705cfc19f3ce56c489191b73763f00f9c0311a5de09d4bb1","ssdeep":"","tlshash":"58b024047fd71c413533301443df0100105cc4530000c100350cd3510fd0c10c317ddc","size":92,"data":"","first_seen":"2026-08-09T01:16:07.128333Z","last_seen":"2026-08-09T10:06:27.607772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/server.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"093d811f3177d82534182d8acfcf7a6a","sha1":"75b28154bb9cf1c61592abd2fbc173bd7cfcbf95","sha256":"110c5b873ee1c225f1127312e0111690219e0abd9be86eb8f33c195f810d17a0","sha512":"b94eb055e1983f0d34f8db02d14d899a0c9d75fbc23ea9fd00a81183566119546ed8eaaee9568200f329afd7c046e4f4a7863cd74cfa37aaa94dc46e8750f51a","ssdeep":"768:k9dk3zxhgSEWoqAhlfAwOJQDckHyspG2sxnz1sXppoU0oOaxDxPbqloMi:idk1hgqBwOqG2qnz+XppoU0o3","tlshash":"c943974ca21101265633b3791da39505fb365127624186053eec8781bfbef6ae3b2fde","size":55673,"data":"","first_seen":"2026-08-09T01:16:07.109164Z","last_seen":"2026-08-09T10:06:27.592959Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-09","alert":"Detects file containing Telegram Bot API","trigger":"caisse-epargne.mdps.fr/espace/js/server.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"socket connected : wUxj1dfA5bcKx0BXAAV1","filename":"https://caisse-epargne.mdps.fr/espace/js/server.js","line_number":60,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.722Z","timestamp":1786269957722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.0.0-beta1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.0.0-beta1\r\nx-jsd-version-type: version\r\netag: W/\"25617-q3SIoVyTmtfFSq15BDC3uaLXfq4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\nage: 2501416\r\nx-served-by: cache-fra-eddf8230230-FRA, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153111,"size_decoded":24519,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"bbf4700154b05c5746c74bd564a029a0","sha1":"ab7488a15c939ad7c54aad790430b7b9a2d77eae","sha256":"0267260045096457f26914277f49eef5da5ec54ac6aee8579be4810332e518b6","sha512":"b61a21daf781df9a239408726190b479aced4c0521c4bbd26655ab36d955d359e3aacfd4758df8db5260ee55f41aaf5245d19541e2fcc5e069f71d483f22f5c1","ssdeep":"1536:TtfJxYrkplD+sEBpy0cuJc222DWg5SNVUpz600I4fS:TtfJ1NVUpz600I4fS","tlshash":"40e383dbf581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b492c70963e4c","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-08-16T04:28:52.369288Z","times_seen":1416,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":9,"receive":28,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/server.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.723Z","timestamp":1786269957723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/js/server.js HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 08 Aug 2026 14:58:34 GMT\r\netag: W/\"6a77441a-d9a0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":55712,"size_decoded":10931,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"093d811f3177d82534182d8acfcf7a6a","sha1":"75b28154bb9cf1c61592abd2fbc173bd7cfcbf95","sha256":"110c5b873ee1c225f1127312e0111690219e0abd9be86eb8f33c195f810d17a0","sha512":"b94eb055e1983f0d34f8db02d14d899a0c9d75fbc23ea9fd00a81183566119546ed8eaaee9568200f329afd7c046e4f4a7863cd74cfa37aaa94dc46e8750f51a","ssdeep":"768:k9dk3zxhgSEWoqAhlfAwOJQDckHyspG2sxnz1sXppoU0oOaxDxPbqloMi:idk1hgqBwOqG2qnz+XppoU0o3","tlshash":"c943974ca21101265633b3791da39505fb365127624186053eec8781bfbef6ae3b2fde","first_seen":"2026-08-09T01:16:07.109164Z","last_seen":"2026-08-09T10:06:27.592959Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-09","alert":"Detects file containing Telegram Bot API","trigger":"caisse-epargne.mdps.fr/espace/js/server.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.031Z","timestamp":1786269958031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 334539\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-17T19:35:08.902008Z","times_seen":329678,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/imgs/login/logo.svg","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.084Z","timestamp":1786269958084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/imgs/login/logo.svg HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16763\r\nlast-modified: Mon, 03 Aug 2026 16:49:42 GMT\r\netag: \"6a70c6a6-417b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":16763,"size_decoded":17017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1817fb38f58ca602ee6ba7aff3c1ba0","sha1":"bd1e27891d82614677ae1d3fb2a25c52ad30baa0","sha256":"06875b57c073207d33eb4ae9583b369a1375dc61e0227cb9fd655f5bff59bfaf","sha512":"3c7ed26e51ccd6bd30f4b07d6915f2afd5865bfc3030ae250f79e1b53c4e358786c4d4ea7623c01e0a660fdb140ca61041516632080c72c7433a96bb805d93fa","ssdeep":"384:8KYjZ3gFBLzc8ZQ6a0wUnrLdvLg9ZVYDcekytJziBJ01EILy:8Punt4L8uN","tlshash":"4772d630e7605ab1e78e0385ecf6bc8d66c502bb2f0455ccb64d8abe9f5cd610994be0","first_seen":"2026-08-09T01:16:07.111557Z","last_seen":"2026-08-09T10:06:27.594347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.9.1/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.720Z","timestamp":1786269957720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.9.1/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.9.1\r\nx-jsd-version-type: version\r\netag: W/\"15a09-bhLh682YP4SOXCgKt3ZJ7rROdLw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\nage: 3361460\r\nx-served-by: cache-fra-etou8220083-FRA, cache-bma-essb1270079-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11996\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88585,"size_decoded":12777,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"91f7cf4a3d3f0660b4e3914e5ac9298a","sha1":"6e12e1ebcd983f848e5c280ab77649eeb44e74bc","sha256":"f0cf9bd878febf2ff6279b59f696031deb8f0f9f4ab1a1199f55d78f7c558638","sha512":"09a4cc428278f64e2fc3d5ced15a5306998ccfc5e90963f92611a606fb81a8239a3875843563b50ab565d3dbb8ca9f320554880fab260f8fa0a730c955038fc1","ssdeep":"768:iqnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVC:fOocm4FuwZ5ijINRDl8i","tlshash":"9283eebad14f05f9d341e4d92743674693aab93ce1812c7ad342399ee3c16188ad73ec","first_seen":"2023-04-06T17:13:13Z","last_seen":"2026-08-17T05:12:16.593874Z","times_seen":2357,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":13,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:05:57.127Z","timestamp":1786269957127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 319\r\nlocation: https://caisse-epargne.mdps.fr/espace/\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":38,"connect":34,"send":0,"wait":38,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/login.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.534Z","timestamp":1786269957534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/login.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 16:48:12 GMT\r\netag: W/\"6a70c64c-3575\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13685,"size_decoded":3144,"mime_type":"text/css","magic":"data","md5":"88b21f5c2b5d4e509e229144e8bb6493","sha1":"3167da53cd5a0b6d824f3169890f3c1b99f2107f","sha256":"2b05f7a247072702e65669b14ae12f6dde073d12fc8f1b19bb10f6e07892e525","sha512":"0454d0cda0aaba8b1b7fd125e6b284d5da80081c09c929eacdec7efcda45490647634fb7b852f5c82568a772110451f783765aa266d41e2dfa2cf52d80734350","ssdeep":"192:Ap2F4+pubDdhBf0K9/K5pVXKW5S4F3l2YV9pRND/yh9mMdVRKAo9mBwhbIDk4kAT:DHrWZxsZD5Dbo","tlshash":"6b520146d6066101b2339ea87fb34a02e7a6a4138751917d3ec892484fbb758ce72fdd","first_seen":"2026-08-09T01:16:07.104964Z","last_seen":"2026-08-09T10:06:27.596631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/sms.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.718Z","timestamp":1786269957718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/sms.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.752Z","timestamp":1786269957752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Aug 2026 10:05:57 GMT\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36284,"size_decoded":2811,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b06a98257c382512bef704699df33803","sha1":"28e1855c7de897d5cdbfe3ad91389d58a872cb68","sha256":"71f914a08fa2b30a9a0cefa529c7d3b28da53a3eac404126355849eebe953dac","sha512":"f096e28f04b020430ddb6beddf5cb913400ae4fe0d88c1d9ca6e966aee29248b911f0321f4ac8d8a18d058709ce7855c5671bd01125200ac4c4ca7f53958dc17","ssdeep":"384:+FOMDIA4v7oqY49ZxWSqqY49t5qY4tMgqY45f/qY45uOqY4P:jUW+6hnwYzFCo","tlshash":"faf22ca000171850aa435de237ce7e34ee0f92617044d07a6bfd8b9beedad6963b435d","first_seen":"2025-10-01T16:14:36.239597Z","last_seen":"2026-08-09T10:06:27.59807Z","times_seen":77,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":41,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/socket.io.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.532Z","timestamp":1786269957532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/js/socket.io.js HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 14:59:04 GMT\r\netag: W/\"695145b8-139c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":80322,"size_decoded":20350,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32611), with CRLF line terminators","md5":"e44519287f4dea8cfa2cad2684c27b84","sha1":"41f41dedfaa03d689c360116e9fbc107581f519c","sha256":"215c3fe5349dc70cc145cd80a813ff3ab675a4787182f1f588d4a18591ea1241","sha512":"18ac8d6b3fa30cc6e68121aa82fa9651ab97e010c77b1f6b9bacabea162c61de330e55ca46f32452e68ee0e207a6129e17bf54c0ce3f0426337d97478bfc8e47","ssdeep":"1536:1ilLJHcbEgZFPl64AkIPxjEgZFPltqxQ4mmT+9Sr7JFzi6qxKryNcnLsF111x:1YLJHcYR4AkIPxgAqxGf9SLzi6DM6LKT","tlshash":"f573404573e13625879ab1a1dc9f8849b73998ac138a444d7b1cc4f468788bc877eefc","first_seen":"2025-07-30T13:58:35.995963Z","last_seen":"2026-08-09T10:06:27.59854Z","times_seen":6,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/main.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.033Z","timestamp":1786269958033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/js/main.js HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://control-list-panel.homes/socket.io/?EIO=3\u0026transport=websocket","fqdn":"control-list-panel.homes","domain":"control-list-panel.homes","tld":"homes"},"ip":{"addr":"172.67.174.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.126Z","timestamp":1786269958126,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"control-list-panel.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 16:39:33 GMT","end":"Thu, 01 Oct 2026 17:35:44 GMT"},"fingerprint":{"sha1":"38:66:BE:72:46:A8:1F:AB:98:C3:11:1E:71:A1:C9:6F:53:C1:9D:F8","sha256":"74:1E:CD:C8:20:6F:D1:CB:2C:CC:68:9F:86:CD:6D:A5:83:C3:BC:0C:81:DC:9F:D2:15:74:26:F8:19:94:CB:DA"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: control-list-panel.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: G54ZxjGha4ZvQwAgsR3u/Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 09 Aug 2026 10:06:05 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: +u2hxnO1D69TfwNx5+GSj+tS9nE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyUDyfQVSP6Qrm9DVQuphPIxPLX8ckdXLAF3YjFoRYb8f4wCi17FqTpnTtDgN9VyBCHils8m9okJFyK7n8ecWDlNtxqlndYQEGVwKERQMMrec8o9Z%2FMu9aC0w%2BdweaqU29mD%2BQoTmcohCiM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a285f22ea88123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":607,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T19:43:02.922917Z","times_seen":17941321,"resource_available":true,"data":null}},"time_used":13271,"timings":{"blocked":-1,"dns":6449,"connect":6390,"send":0,"wait":421,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/cle_approve.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.541Z","timestamp":1786269957541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/cle_approve.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.111Z","timestamp":1786269958111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 334539\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-17T19:35:08.902008Z","times_seen":329678,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.112Z","timestamp":1786269958112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 334539\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-17T19:35:08.902008Z","times_seen":329678,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/app.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.537Z","timestamp":1786269957537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/app.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 1\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Mar 2021 01:39:06 GMT\r\netag: \"1-5be3e5d4b0280\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1,"size_decoded":271,"mime_type":"text/css","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-17T19:41:31.325197Z","times_seen":230570,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/main.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.724Z","timestamp":1786269957724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/js/main.js HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/spinner.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.778Z","timestamp":1786269957778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/spinner.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/cle_approve.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.782Z","timestamp":1786269957782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/cle_approve.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.icgauth.caisse-epargne.fr/ria/accessecurite-ces-current/assets/background_startup_ce_default.jpg","fqdn":"www.icgauth.caisse-epargne.fr","domain":"caisse-epargne.fr","tld":"fr"},"ip":{"addr":"176.100.163.229","port":443,"asn":0,"as":"","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.103Z","timestamp":1786269958103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.icgauth.caisse-epargne.fr","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 16 Jun 2026 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:C8:A3:BB:EA:4C:21:14:A5:2F:56:F0:D7:33:7B:72:F6:D5:43:A7","sha256":"83:62:86:5F:1F:4A:43:37:F4:EC:00:2A:37:23:A3:16:05:E7:D7:41:D7:87:C5:F3:8F:BA:C4:15:8B:6E:4F:6C"}}},"request":{"raw":"GET /ria/accessecurite-ces-current/assets/background_startup_ce_default.jpg HTTP/1.1\r\nHost: www.icgauth.caisse-epargne.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nContent-Length: 94723\r\nConnection: keep-alive\r\nDate: Sun, 09 Aug 2026 10:05:58 GMT\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nETag: \"miLx/Y7TpavbX8r4VMYtMsqwS28=\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Mon, 09 Aug 2027 10:05:58 GMT\r\nContent-Security-Policy-Report-Only: style-src 'self' 'unsafe-inline' *.caisse-epargne.fr fonts.googleapis.com; font-src 'self' data: *.caisse-epargne.fr fonts.gstatic.com; frame-src 'self' *.caisse-epargne.fr *.bpce.fr *.natixis.com *.advanced-web-analytics.com https://cdn.appdynamics.com/; frame-ancestors 'self' *.caisse-epargne.fr *.bpce.fr *.natixis.com; script-src 'self' 'unsafe-inline' *.caisse-epargne.fr *.bpce.fr *.natixis.com *.tiqcdn.com *.appdynamics.com *.myfeelback.com *.bing.com; object-src 'none';report-to https://www.csp.bpce.fr/v1/record?id=C3PAS;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94723,"size_decoded":95663,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1200x901, components 3","md5":"2385ae099893b14f9cad125d7abd46d0","sha1":"9a22f1fd8ed3a5abdb5fcaf854c62d32cab04b6f","sha256":"1a666d46532b2da998f521df48e4e961857c3f0d709dae19d5657ee1167c04dd","sha512":"b2f1069824424352183a510a6c86c7091927950ca3d3f1391d62ea0bb264b10bfb6fb48e092f339e318a88605c15614461c19dc01af5aa78359c2aa591f04dcd","ssdeep":"1536:Bo11ZAck4PM3Sk0HIAjceylVHiB+/reEzBtoHgTeOGenkaWSaYaF1hd9Qq2ueTCA:Bm1FPDeoceylVH+qpzBag7jWSaVF1kuk","tlshash":"c293126852221b66e1bd17318a7b1fbf0671420534bb9bd35b7f1e08914bb963a83f43","first_seen":"2026-08-09T01:16:07.113518Z","last_seen":"2026-08-09T10:06:27.59993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":2,"dns":70,"connect":93,"send":0,"wait":188,"receive":188,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.110Z","timestamp":1786269958110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 334539\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-17T19:35:08.902008Z","times_seen":329678,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.icgauth.caisse-epargne.fr/se-connecter/assets/logos/square-logo.png","fqdn":"www.icgauth.caisse-epargne.fr","domain":"caisse-epargne.fr","tld":"fr"},"ip":{"addr":"176.100.163.229","port":443,"asn":0,"as":"","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.371Z","timestamp":1786269958371,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.icgauth.caisse-epargne.fr","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 16 Jun 2026 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:C8:A3:BB:EA:4C:21:14:A5:2F:56:F0:D7:33:7B:72:F6:D5:43:A7","sha256":"83:62:86:5F:1F:4A:43:37:F4:EC:00:2A:37:23:A3:16:05:E7:D7:41:D7:87:C5:F3:8F:BA:C4:15:8B:6E:4F:6C"}}},"request":{"raw":"GET /se-connecter/assets/logos/square-logo.png HTTP/1.1\r\nHost: www.icgauth.caisse-epargne.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 54675\r\nConnection: keep-alive\r\nDate: Sun, 09 Aug 2026 10:05:58 GMT\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nETag: \"28+Y9H0caYe2Rz5ME7S4EAg5r/E=\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Mon, 09 Aug 2027 10:05:58 GMT\r\nContent-Security-Policy-Report-Only: style-src 'self' 'unsafe-inline' *.caisse-epargne.fr fonts.googleapis.com; font-src 'self' data: *.caisse-epargne.fr fonts.gstatic.com; frame-src 'self' *.caisse-epargne.fr *.bpce.fr *.natixis.com *.advanced-web-analytics.com https://cdn.appdynamics.com/; frame-ancestors 'self' *.caisse-epargne.fr *.bpce.fr *.natixis.com; script-src 'self' 'unsafe-inline' *.caisse-epargne.fr *.bpce.fr *.natixis.com *.tiqcdn.com *.appdynamics.com *.myfeelback.com *.bing.com; object-src 'none';report-to https://www.csp.bpce.fr/v1/record?id=C3PAS;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54675,"size_decoded":55614,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"fd2ec90732cd5188061c31b3d13adb03","sha1":"dbcf98f47d1c6987b6473e4c13b4b8100839aff1","sha256":"a74b07bb2b773e2e238b8e1a76d5cfc2599799f4ec19ca7fa5476fadb94c4b7d","sha512":"ebae37d6b3159b5c0e91168a6ac155f539f1760b412729b1ed0bb88641ad89b414b3ce387fdb74db79d1d60bbd5a6236d464d7232a81cec0b5daf636e06fd7bb","ssdeep":"1536:t4P7WC7Gv2wL3DkoSjBRMVO3km14/bf7Za:tO7v7Y2aSj3ZazzZa","tlshash":"df3302f720918a9c4cf5d457ddd69efa0c75acec748d46e84eb62f20088ff836928654","first_seen":"2025-11-21T12:14:32.890649Z","last_seen":"2026-08-09T10:06:27.601236Z","times_seen":4,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":0,"dns":0,"connect":99,"send":0,"wait":274,"receive":99,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/app_approve.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.780Z","timestamp":1786269957780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/app_approve.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extreme-ip-lookup.com/json/?key=demo2","fqdn":"extreme-ip-lookup.com","domain":"extreme-ip-lookup.com","tld":"com"},"ip":{"addr":"216.106.188.200","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.081Z","timestamp":1786269958081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t1.extreme-dm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 23:35:19 GMT","end":"Fri, 28 Aug 2026 23:35:18 GMT"},"fingerprint":{"sha1":"14:C6:7E:58:5A:6C:B6:6D:47:80:CC:97:F1:4F:A1:A0:D9:67:71:7D","sha256":"FD:E7:32:C5:F9:12:F8:B6:0A:17:7B:D0:5A:E3:2F:DE:A0:1E:16:E5:4B:29:C9:9F:45:68:39:C3:D1:63:A0:B7"}}},"request":{"raw":"GET /json/?key=demo2 HTTP/1.1\r\nHost: extreme-ip-lookup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caisse-epargne.mdps.fr/\r\nOrigin: https://caisse-epargne.mdps.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:58 GMT\r\ncontent-type: application/json; charset=utf-8;\r\ncontent-length: 440\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":440,"size_decoded":690,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b06d85b2e4aa70c5c118d786db2985d0","sha1":"3a3fc37be3c0650430740d5140eea6eaa6eafa11","sha256":"adc63f4a990468dd3b3ec47763ffd379d56b93e4a61e12491331acded3471e92","sha512":"508d50eb4af09e484dee1986641c0c089e15f3c6efa3a36e81c24b4a0ab7199dfef62003f160afb1164d6679d8eb0f023091f3d50415c010f90296ec4ed1a58c","ssdeep":"","tlshash":"36f09a3a94281d294ea54340289ba19ab5634f077f41300ddfa9df18de0d66f11f777d","first_seen":"2025-12-22T09:00:12.153283Z","last_seen":"2026-08-17T05:42:54.844766Z","times_seen":62,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":1,"dns":43,"connect":31,"send":0,"wait":32,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:05:57.285Z","timestamp":1786269957285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/ HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 23:30:38 GMT\r\netag: W/\"6a766a9e-74b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1867,"size_decoded":912,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8026115c684377db30e10dbe7c79ec4d","sha1":"5a947aaafb7a65ad074c009c54b4013c5fb8fe00","sha256":"ed903405632ee986c112f3a8e20645700915c435900750c3bd9166f5a78522c6","sha512":"48521cc155482efbac7568992a7807f37efc9fa61280f52d456707575b5568ace42a96474a24d838e58e29e740a5e05ce72bbd772cdb15c02b0db36db2226bc7","ssdeep":"","tlshash":"1931105e9c82c84962319656e8aef06dffd7801343448ca4b5ad37371f74acc88abc5c","first_seen":"2026-08-09T01:16:07.09629Z","last_seen":"2026-08-09T10:06:27.602593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/loading.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.536Z","timestamp":1786269957536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/loading.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 17:14:28 GMT\r\netag: W/\"6a70cc74-453\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1107,"size_decoded":587,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7954d3995d3e18825f650953da00dc1b","sha1":"90f0819b916713610f499d050d845baff26c2216","sha256":"4f5ea3df5bd75b4d149a13f4034648e4b72934ed42be1537d77a64d0d51f0fbc","sha512":"36a2987cd015808272f4633c589ae848b45423f980c8e4c8db226ff61cfa5169fc217099a9bccc77a10999803147c6df009d7a17f9c76c62cd21d85d41c35aa9","ssdeep":"","tlshash":"6911dd69e9400247ae3b97302ff40669e93680031b4215fcfbe571150f35058a933fa1","first_seen":"2026-08-09T01:16:07.098322Z","last_seen":"2026-08-09T10:06:27.603733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/spinner.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.538Z","timestamp":1786269957538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/spinner.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/css/app_approve.css","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.539Z","timestamp":1786269957539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/css/app_approve.css HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 17:27:55 GMT\r\netag: W/\"328-6587853314b97\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-08-17T18:14:28.911147Z","times_seen":38871,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/js/jquery.min.js","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:57.529Z","timestamp":1786269957529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/js/jquery.min.js HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:57 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 14:59:04 GMT\r\netag: W/\"695145b8-15851\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":30136,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-08-17T06:16:40.443536Z","times_seen":7446,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caisse-epargne.mdps.fr/espace/divs/Login.html?v=1786269958033","fqdn":"caisse-epargne.mdps.fr","domain":"mdps.fr","tld":"fr"},"ip":{"addr":"104.105.202.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caisse-epargne.mdps.fr/espace/","date":"2026-08-09T10:05:58.036Z","timestamp":1786269958036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caisse-epargne.mdps.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 16:32:09 GMT","end":"Thu, 05 Nov 2026 16:32:08 GMT"},"fingerprint":{"sha1":"10:F0:84:CE:50:98:E6:B8:9D:7E:AC:B3:70:40:5C:E7:90:99:6F:14","sha256":"18:E0:10:5B:DB:A8:C8:32:68:20:66:A6:A7:00:18:CF:31:B2:CB:C4:29:D3:85:4F:1A:94:43:AF:FF:7E:DB:37"}}},"request":{"raw":"GET /espace/divs/Login.html?v=1786269958033 HTTP/1.1\r\nHost: caisse-epargne.mdps.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caisse-epargne.mdps.fr/espace/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:05:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Aug 2026 00:13:10 GMT\r\netag: W/\"6a767496-1171\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4465,"size_decoded":1632,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (305), with CRLF, LF line terminators","md5":"ab64ecbebb47f2f43ae44ed44ce707da","sha1":"1ebab0f177c182a4931c05d0ceceddc4cf622da0","sha256":"5e79c9a88bc61c2e2786d079525540eee975b12185adffe5c12d4ab9b148610c","sha512":"7ccd6362fea32927dd9b819a2a1e6022b363e6bea3ae5b3eaa52479689f3d4608344ab5e5b5a0709381966f2e3b41e84f18b85491d7046d79da3c3e25bbbec89","ssdeep":"96:MYapG8R+2I0RyS2MgCroYYjwatnB+7WPz:Paom+n04SV5PKwkB4E","tlshash":"e691852055fe387fa0734065fbd39b463b998603c60e8524b5ad18b59fcbc9696373c8","first_seen":"2026-08-09T01:16:07.121197Z","last_seen":"2026-08-09T10:06:27.605148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"caisse-epargne.mdps.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}