{"report_id":"68b01f56-6c69-4af6-8871-9aeb2025659d","version":6,"status":"done","tags":[],"date":"2026-03-09T00:44:37Z","url":{"schema":"http","addr":"securpassrenov.com","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":0,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"final":{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"title":"Accéder à mes comptes - Crédit Agricole Centre Loire","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"securpassrenov.com","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":0,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T00:44:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-09","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"credit-agricole-compagnon.inbenta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"credit-agricole-compagnon.inbenta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"credit-agricole.inbenta.com","ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2007-01-16","domain_rank":4931123,"first_seen":"2018-10-31T08:59:43Z","last_seen":"2026-02-09T10:48:10.617607Z","alert_count":0,"request_count":2,"received_data":62391,"sent_data":875,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"botcli.credit-agricole.fr","ip":{"addr":"158.191.139.28","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"domain_registered":"1995-07-06","domain_rank":4196092,"first_seen":"2021-04-22T11:27:10Z","last_seen":"2026-02-09T10:48:10.519349Z","alert_count":1,"request_count":2,"received_data":96748,"sent_data":912,"comment":"","tags":null,"fingerprints":null},{"fqdn":"credit-agricole-compagnon.inbenta.com","ip":{"addr":"52.18.39.149","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2007-01-16","domain_rank":6237334,"first_seen":"2018-10-31T08:59:43Z","last_seen":"2026-02-09T10:48:09.684296Z","alert_count":2,"request_count":1,"received_data":564,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d27bwt4nw7kfh0.cloudfront.net","ip":{"addr":"54.192.209.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2021-08-16T12:19:12Z","last_seen":"2025-11-23T19:15:04.173748Z","alert_count":0,"request_count":1,"received_data":822,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.credit-agricole.fr","ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"domain_registered":"1995-07-06","domain_rank":14186,"first_seen":"2013-09-24T06:48:08Z","last_seen":"2026-03-04T14:58:27.782174Z","alert_count":0,"request_count":22,"received_data":2375487,"sent_data":11278,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"securpassrenov.com","ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":185,"request_count":37,"received_data":6362314,"sent_data":34363,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:524e19629f1c6fdfa75cd1a99d6acbbf","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":2,"received_data":206087,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dprru9qusx2ed.cloudfront.net","ip":{"addr":"54.192.209.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2021-08-16T10:19:12Z","last_seen":"2025-11-23T19:15:04.189725Z","alert_count":0,"request_count":1,"received_data":80947,"sent_data":857,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad0b5d052918f37b89ec0389dcc773fc","sha1":"61d8ab4c8e0b97883a5787868bfa73edfce9cabc","sha256":"4abd213af4003375ddbab093dd18544b302f09d0914c6dc4a2b9ef85b1e4b65b","sha512":"2a4172af49db64801edc11e90840095c637433c8930c7c5a92bd31ebbd30c5f78232bda11a04ba94c2e5374c88bbda1ed0f0de09e6ecf7bb8353f6b3565743f9","ssdeep":"96:MZN0DkigvgFPBvVbqK7QbfwWaAB7CUu15NEjDGyS5wyCy64u8IKiWESptGt8sSS:Mf0tmK7QsW/CUuivGySOy7nfjptGXV","tlshash":"8cf1c5debb8e90116a6645332b9f167a7037d1932899c843f00c02943fd8e9ec758dee","size":7941,"data":"","first_seen":"2026-03-09T00:44:51.729324Z","last_seen":"2026-03-09T10:51:40.359909Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96f2aab51d64deba1c946a0cc5ee7ff3","sha1":"b6238c42f036911198656c6c0dd6813b5388de5f","sha256":"f545be47dee03e860e8d2f188e6bab5f687c0d53d81669e0dc9ccb184fbfc64a","sha512":"811e0697edef24b9d42c24221211928070ea9169761ea8a250530f2f3be459462f154cd5520a56457a07aeea3e7830eb653c1fe3ed118ddbb161871dcfe69c70","ssdeep":"384:8WM3EsEC59MPSyGflSycGhytv8nhZPCUQ2ua1SJraBV2P+rdRINvnEE2ilvXq5U7:8zEsEC59MKyw0yBh6G+PzT22XgUW+","tlshash":"19a2f99db559563a83bf243a25af05187a37ed764e88c001e05e98e13af4e4103efe7c","size":23241,"data":"","first_seen":"2025-10-27T20:56:08.510928Z","last_seen":"2026-05-31T09:21:33.233208Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6e6eb0aa463d5c032c93136ab5bb936","sha1":"2c5dae2ad54779893f0808ee7a3b0b9b8521ebfe","sha256":"7ade6bbb556964f0ac83ef1ced5f59492c0153f79d66e2666dcdf9150b6d397e","sha512":"9b2504cec19c5d6d42a413cf5c6b5b2b4a10013cdfb6fdf8e119f973fe0778e6a1fff161de0fdf26d8779f5bf89de741725f9df298e1e5879c769137000548b4","ssdeep":"","tlshash":"5d318e85c69340050fb80527793fa095a634c43058da2cc7b0296bdcee9dbd1e6eddfa","size":1748,"data":"","first_seen":"2026-03-09T00:44:51.730994Z","last_seen":"2026-04-04T09:23:27.952572Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"385df6c2ceeac5b46cb06d936cd60877","sha1":"c96412d676677a99021fc9ab3ca733862ef14916","sha256":"9251e42f5b9e4c3244918d90885801beaf6088063530dcc1d63c07ecad88cb32","sha512":"448aeff02b7f2637ed42b21ec88fb0dafc9d5ce91bb6d36f44ddf28262835660c1b8c702690c32e8913829f126a72f8eae64138ce7406565ad263b2b9650b50c","ssdeep":"","tlshash":"dff0505cdce6842de83e7724d57fe128b1a4d8736205d550f50cd11c8fe6875429e5f4","size":550,"data":"","first_seen":"2026-03-09T00:44:51.732208Z","last_seen":"2026-03-09T10:51:40.365394Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e24dd7c1d960756538820096c5b0efd4","sha1":"abc08bdd134c1d114879ecf8160fb1ca1996f240","sha256":"afed80591ce9712addc164f6eed1bbe6d792071357ee25ea867f8203d2b8c6db","sha512":"0acb4b4f4fe9ea9bb2dd69a6bbcd9686fb668c1a5d16a959cda14f1e018b6a20a14066e28adae3cf989a9d52d61ef7e9fed7dd091d7347dcbc2a394fff063abb","ssdeep":"","tlshash":"6c21606ef3ec1501a53375634b5b760e2a37617769414c0f3c1614c13ba5c9e972ef54","size":1112,"data":"","first_seen":"2026-03-09T00:44:51.733405Z","last_seen":"2026-03-09T10:51:40.366388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"871a57e91f70b67f0bfd285e36cf2169","sha1":"3138b71e1352620422540ee5d46da78ad6b60d2d","sha256":"fce586c653bd071b7ba76a3df0d732ddf5ada287579f824a26594573cb9c8c20","sha512":"83447f764b8b2ae846651ae75a287beb34f5348773207208972f8afa87367e4478737d43c3e780c56e07e97ad696bb9b9707c80602c1eafb19860f2129dc1a20","ssdeep":"192:W0rqPKxOxaISWktcibWZgs4rlE00nwDW8KGJGt:V4KxsvxktcibWZgs4rlE00nwDW8KGJGt","tlshash":"cdd182e572190fb71acf6577343f834cb376006dd0040b68ae699af85570d89a82afb9","size":6644,"data":"","first_seen":"2025-06-06T13:25:36.015348Z","last_seen":"2026-05-31T09:21:33.290298Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad0b5d052918f37b89ec0389dcc773fc","sha1":"61d8ab4c8e0b97883a5787868bfa73edfce9cabc","sha256":"4abd213af4003375ddbab093dd18544b302f09d0914c6dc4a2b9ef85b1e4b65b","sha512":"2a4172af49db64801edc11e90840095c637433c8930c7c5a92bd31ebbd30c5f78232bda11a04ba94c2e5374c88bbda1ed0f0de09e6ecf7bb8353f6b3565743f9","ssdeep":"96:MZN0DkigvgFPBvVbqK7QbfwWaAB7CUu15NEjDGyS5wyCy64u8IKiWESptGt8sSS:Mf0tmK7QsW/CUuivGySOy7nfjptGXV","tlshash":"8cf1c5debb8e90116a6645332b9f167a7037d1932899c843f00c02943fd8e9ec758dee","size":7941,"data":"","first_seen":"2026-03-09T00:44:51.729324Z","last_seen":"2026-03-09T10:51:40.359909Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6e6eb0aa463d5c032c93136ab5bb936","sha1":"2c5dae2ad54779893f0808ee7a3b0b9b8521ebfe","sha256":"7ade6bbb556964f0ac83ef1ced5f59492c0153f79d66e2666dcdf9150b6d397e","sha512":"9b2504cec19c5d6d42a413cf5c6b5b2b4a10013cdfb6fdf8e119f973fe0778e6a1fff161de0fdf26d8779f5bf89de741725f9df298e1e5879c769137000548b4","ssdeep":"","tlshash":"5d318e85c69340050fb80527793fa095a634c43058da2cc7b0296bdcee9dbd1e6eddfa","size":1748,"data":"","first_seen":"2026-03-09T00:44:51.730994Z","last_seen":"2026-04-04T09:23:27.952572Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"43f057d9ebc51c310e6d330c6b49cdff","sha1":"6fd59fe7d31e2df4b243412b0196b59275d3c4e0","sha256":"790db882480e7759b4bd56a04c24e515e1860f4a1481ba2ddaf3a1652ca53474","sha512":"6b1dcf8c47b8a8ddd9ce982879fbc08b382186e9920b0d70c7dc6390b58ecf4acfdf3f3492f6e84f76bdd45edfb60493bffd189a009fa50d62583308737ea0a1","ssdeep":"","tlshash":"2d8000282cb8000e2838328ef3333330b0c202308800c200ce00000c3020803c2200c0","size":35,"data":"","first_seen":"2025-09-04T20:46:13.915016Z","last_seen":"2026-05-31T09:21:33.29745Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5787007e0d059ceefccfbb8bdd147fdc","sha1":"e3d3b7000175f72b13578be6d2a5b6a862f43c57","sha256":"d5abb6cf4c5c77ca2c2f7810a272eb7a543ddc2b004583f19ab22daa5c6d5da0","sha512":"75ceb9e15fd8b159070ece8a32aaeb023b75381488f74f56e9cee0ab0cce981d515fb6d27aba320cea7487656e338a1ac08ee169988446f644b8ce458fa95bc7","ssdeep":"","tlshash":"cfa002291c76405c2032b1ddf333377170c302344040e504de50001c3032043c2518c0","size":61,"data":"","first_seen":"2025-09-04T20:46:13.918696Z","last_seen":"2026-05-31T09:21:33.299281Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","fqdn":"botcli.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.139.28","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"393ccfbd8b1d966deadadff26b9d20e6","sha1":"ac166c7383c433bc73f96d17e32c1624cf2d49ee","sha256":"53b49148989b6ab2d2e5d8f58aa00ce8fcad170b17154ea36ac1dac7120bee6e","sha512":"d530df01eb9ce25f4cc80a69e50323e44be9b35913954f696b87e7bcc4849a6e80480eede8c28762435c8b512bd844806c19bded47c600929fa349930ea172db","ssdeep":"1536:CcJxlrsIALZ4S62B/jdwOCNUM2M9QIQ8C6XOtfeqaUspM7vYGavt8WqPut2qy8l8:CcJxlrsIAeR2BJ2NnSosvFyt8WqPut/m","tlshash":"4073b6501a80985c2307fd7f322af6d5e4960d9a3489cae3f1567e246c9262bf1fec74","size":76097,"data":"","first_seen":"2026-03-09T00:44:51.696131Z","last_seen":"2026-05-31T09:21:33.214072Z","times_seen":10,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-09","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6d7264019032e3edc5803d0b3187ace","sha1":"49fa14abe0d7bf25d1429c4d3c37c827290e12f7","sha256":"b2c2935b4bd3a33ee8c245118b5834663a50a07c4b0d7e0f1a223d3837af65cc","sha512":"60f226a42a1483fc97a19fa337a39984676dd92f8db715512c978018cd515bd0150ab5c6a74aac45b0ad778c07510d037c39f959ca54cf1ad651c92389afa303","ssdeep":"","tlshash":"c5b0124467f4851c97217f022ab867f33e24f27b90c5a40b504aac7855c4cd1e05a473","size":107,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-05-31T09:21:33.299971Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery/granite.min.f9fccbe1ad2b43c0698e504caf1a9c31.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fccbe1ad2b43c0698e504caf1a9c31","sha1":"ad069936c269a5d87f6b0f51e7e630af425bb471","sha256":"0ba744e3f4c5487082da84271df5c04788510830b5a20e7f9ac2a6ec9da7bfc1","sha512":"b7ddf2db5201826fbc3f8ec930dafcd701efc346d74d563a7fee5e35688506a2db2176525611aa7e705e54d54875bf942b785b2b6bb893adfb54534062e93ca6","ssdeep":"96:tLTd4lB3A4dCYRRl60N4wNwkGQeWHuDcOCnQDh4ECaIx9UGt:YlB3A4dz20+wEMCcOoQDhLpu","tlshash":"15c1c44b6cd0207397f361b8a5ff2a02b1326229a44c94a16458d9f83dffd879227f0d","size":5797,"data":"","first_seen":"2025-10-27T20:56:08.508784Z","last_seen":"2026-05-31T09:21:33.197526Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibBoutonVertGeneralVitrine.min.2fd9dbc0d157d55d5182b200351218e2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"78577bafeb416de55afe24ea32b53e85","sha1":"27524fd272f70039f3bce2ac47a0ed2182135165","sha256":"16ea70eef74ae52e3e93c82a2777cf7b967ac99d3ad4ed2b7d153f8c3f0d482a","sha512":"a27989d9b10929ed6e63c8009d6b2ee1176543d989993f706df00901d6b4e56f7eb1cf16861a384c4a0b339bbe3486f3e12737f6735ce92b140205e9cd5586a4","ssdeep":"6144:/5AM3rhqFADCVcszOInMDl068GiusBs/B1b3LlGWPEEKQtaz9SOwZ5nAJbUXkFwv:/5AqhqFADCrU1","tlshash":"12143a0c739220f946eb2376349f12067173d7b59048e487a57c94d22bf8e88a6b7f39","size":200230,"data":"","first_seen":"2026-02-14T17:35:23.94566Z","last_seen":"2026-04-04T09:23:27.940122Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"385df6c2ceeac5b46cb06d936cd60877","sha1":"c96412d676677a99021fc9ab3ca733862ef14916","sha256":"9251e42f5b9e4c3244918d90885801beaf6088063530dcc1d63c07ecad88cb32","sha512":"448aeff02b7f2637ed42b21ec88fb0dafc9d5ce91bb6d36f44ddf28262835660c1b8c702690c32e8913829f126a72f8eae64138ce7406565ad263b2b9650b50c","ssdeep":"","tlshash":"dff0505cdce6842de83e7724d57fe128b1a4d8736205d550f50cd11c8fe6875429e5f4","size":550,"data":"","first_seen":"2026-03-09T00:44:51.732208Z","last_seen":"2026-03-09T10:51:40.365394Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery.min.5fbcca76f439884194ba1eaafc5d91dd.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbcca76f439884194ba1eaafc5d91dd","sha1":"474ee00912022a660f2c3dc64e659ab610c84588","sha256":"5792f1d00ee4f6148dbfb85b36a059aea4fb666e98eb76b1a5006858692374f3","sha512":"75e7882b53c4bb19eeb09c27562f8eb266a81b76893b88aa404b8f79289a2c60e93754b564bfbf75ae83a52779396aa0103128a98df86bfe49e62e1693b07e86","ssdeep":"3072:iiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6Cqax7:ihhryUA3n6em3Yjx7","tlshash":"48e3faedba45207e93f731bbb47f4b1e753a966748188081e16898b83cb4d0450abf7d","size":152373,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.275148Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e24dd7c1d960756538820096c5b0efd4","sha1":"abc08bdd134c1d114879ecf8160fb1ca1996f240","sha256":"afed80591ce9712addc164f6eed1bbe6d792071357ee25ea867f8203d2b8c6db","sha512":"0acb4b4f4fe9ea9bb2dd69a6bbcd9686fb668c1a5d16a959cda14f1e018b6a20a14066e28adae3cf989a9d52d61ef7e9fed7dd091d7347dcbc2a394fff063abb","ssdeep":"","tlshash":"6c21606ef3ec1501a53375634b5b760e2a37617769414c0f3c1614c13ba5c9e972ef54","size":1112,"data":"","first_seen":"2026-03-09T00:44:51.733405Z","last_seen":"2026-03-09T10:51:40.366388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibPageErreur.min.f434b09157730b423058e364dda8b336.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8839fe33194c9000cc55bbe746b3410c","sha1":"5cc324000fd0cadb3e1275c0529de8ef4952d5ca","sha256":"d86a02c12c388518b78b95e11603ca87ef134b05a3d0ad125426258ac65501f2","sha512":"fa5ae674bec594ee8d28877df0623e75f5ab1f05ba32b1695a9b0aa1b723bafbf4056866739af8fbd40fbfd1e43e6b25e0c60bcb004a9fb1fa30c4e5477e89e6","ssdeep":"","tlshash":"21310159b1402025277e27b62727348d3a365cf55544c0b4f0be81d57ee0f366a2fb1c","size":1781,"data":"","first_seen":"2026-03-09T00:44:51.712377Z","last_seen":"2026-03-09T10:51:40.355651Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery.min.5fbcca76f439884194ba1eaafc5d91dd.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbcca76f439884194ba1eaafc5d91dd","sha1":"474ee00912022a660f2c3dc64e659ab610c84588","sha256":"5792f1d00ee4f6148dbfb85b36a059aea4fb666e98eb76b1a5006858692374f3","sha512":"75e7882b53c4bb19eeb09c27562f8eb266a81b76893b88aa404b8f79289a2c60e93754b564bfbf75ae83a52779396aa0103128a98df86bfe49e62e1693b07e86","ssdeep":"3072:iiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6Cqax7:ihhryUA3n6em3Yjx7","tlshash":"48e3faedba45207e93f731bbb47f4b1e753a966748188081e16898b83cb4d0450abf7d","size":152373,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.275148Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"625daf086de5fa5efecbcbd46f54c575","sha1":"441ed26f83bcc1ae2705b778e7e95d533c0c0a1d","sha256":"cca6e07d65d32aedcf9d4ddf93f40f55d6125fc7c23496ac7a7de841e1633ea6","sha512":"2d3b0eb8663910d0cc027bf521730049cf5b37903e9df591509ba1cd36a806024c9daf13235ef53229a8c5d6e38400db28d45ff6c109884dcecd018170063709","ssdeep":"","tlshash":"46519578f3960828d1513081dd6aa0cc487830a31252c156badceb6daf20f95f9f99f7","size":2489,"data":"","first_seen":"2026-03-09T00:44:51.73894Z","last_seen":"2026-03-09T10:51:40.373454Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibMireAuthentification.min.ddd95a2671d580c4e32a6c4f847bbfdc.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"054fe9e2fb20ad92d6958e524c281307","sha1":"06a0e41df3af50059148f6242fdee304cc719da0","sha256":"61f9a7a3fa33c3f7b6a88cf2ed54759aebe779ffc7c1a82c8b1c4943feef0689","sha512":"d44459d79f58e3dadbef1659ea2de1f721df5b4be785598ed429408676e048c6090b9461f8ee357cb3f39fba94152e252c2cabe62c65e579cce29406e88f1091","ssdeep":"","tlshash":"4e115c4df0454ae242a947dca42895e5a0fa1ed24462cb728e3a5b99721cf0e12338a5","size":1000,"data":"","first_seen":"2026-03-09T00:44:51.740283Z","last_seen":"2026-03-09T10:51:40.390929Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-jquery.min.bc9933f301aab450f9455035ae7c884d.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc9933f301aab450f9455035ae7c884d","sha1":"d7ba65e2de1f655619d27201159b768f13c6eda2","sha256":"bc57f2617a6fec0bb97905c5ed5ebce87508f9a803c697aa365101fb7d7255db","sha512":"38156d2daf075991ad9649f658bf08c4b24465f9ef5a741413488505de688e09227a0ec097413b975f834c94511732cf6909037ac24767d43c72ba9d2a1d5fb0","ssdeep":"3072:dFc5D45WQxvjbeelS3o654ZQkAZz3XyZ8sszUJaPixNYQh:dFMs5vZRAZznyGUJaPixNYQh","tlshash":"3ff3f8edb645207e93f731bbb07f571eb53a9a5748088081e15898b83cb8d0951abf7c","size":157821,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.193199Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole.inbenta.com/dist/inbenta.js","fqdn":"credit-agricole.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2724c39bea558d84dbf96a1ec784801","sha1":"d40176e1200a7b5ce59f906ba899d005be421e5e","sha256":"53cddc17a3ee12859b667d7ddec0e335bb50aa06ceeca0df29705c5ee57eab72","sha512":"77167d90fa67eaf626b5cc60be606084264cb9f2a3e1181f9a85bb5da77ee6aa2a1c55e37e004efb400f3d76f61f9fe63587c84b9b66a806befc929a7a5cf8ff","ssdeep":"1536:rq0gWcKM2eN3FJH4agirkILKKT+V7Nt5H4d:MDL44d","tlshash":"f7433c46b21170254ba7a2b8507b2206f2377e28a445444cb51dd9ed3ebcf9e213bf7e","size":58730,"data":"","first_seen":"2025-12-17T22:50:20.844616Z","last_seen":"2026-05-31T09:21:33.214877Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5e93ffcf9099d7b9af0b7b7d3752bf9","sha1":"5e8348c1b27d75a6baec61142dfdb20a6fbd6b82","sha256":"283af03d5c656931c1bf7ee580a0679191e90376bce63675a29a34f65adab97f","sha512":"0074ac35c559514caac0a702c9cf1fec52d1851a701d110b35c200c253ced93c9b710d6bdbcd9adf5d0c49a1a3b6c0330608f37e12ab72f32d02d338c55797aa","ssdeep":"96:MZN0DkzgM0FPBBqK7QbfwWafB7CUu15NEjDGySqwyCy64u8IKiWESHtGxSY:Mf0xmK7QsWkCUuivGySFy7nfjHtGx/","tlshash":"6bf1b4deeb8e50116a660133679f12757037e1a33889c853f00c06903f9ca9e9798efe","size":7604,"data":"","first_seen":"2026-03-09T00:44:51.741773Z","last_seen":"2026-04-04T09:23:27.951933Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/utils.min.92dfced096519807663ae4cf894d79f2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"92dfced096519807663ae4cf894d79f2","sha1":"9d84ca7e7cb0f35df728eb8c72295106519f5d6b","sha256":"3c6288d023a7504044a7a23002ad9266f5e0d52530a9d250bab325f076889b77","sha512":"1acae7d98bfdf9f1758aa011e168abddc20698b56a50be16fbe32c53897c30ad53d80bdb40ff4bc8dd9d8a8d8e805cc0d3466c2c0867b3fbb82d998f80920a42","ssdeep":"192:h9Mmr9HdWrOG894QJGTNm96jLhOe7aWVmfIhmppb6Q8PW9BTk9A/9Tuu:h9r9Hd99Mm9AOe+9BTk9A9Tuu","tlshash":"ac42f99a71cba06743ab2270166f9b0af07b4859944ee091c1f6d9f13cf4d8e8057f7a","size":12061,"data":"","first_seen":"2024-05-24T10:15:23Z","last_seen":"2026-05-31T09:21:33.209014Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a956c2a84b320266623eb38e9f8443c","sha1":"e28a27b451b11d101310f23453ecff50822b77e2","sha256":"aac1a013b17599a641c10f55ba4e70125777beafb54cda6d8ca747a302eb7acf","sha512":"20442590b67489feccb982b0dd872dcaa605a3bbabe9111772c435e4d329477546c01a3db38866a22e7791a36b84d8c6ad99bb519209429eb0abcb43ce21206a","ssdeep":"","tlshash":"e4d05e0de266022018dd437d72ba25784f324047313dca47366f9b883f9ce440366a99","size":274,"data":"","first_seen":"2026-03-09T00:44:51.743054Z","last_seen":"2026-03-09T10:51:40.375146Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9113a252ae5ee8223804d193ff7650e","sha1":"a86e69b3493154d9e67bf0e5522272bbd389cb20","sha256":"0ddbc01a8f2f70954d5e1f064acabd8c59047048ab03eeeff75c6e6923cb0d0a","sha512":"08605987edf922013b412ec7c8f7735a29a038859bca787291daae80a8825e015098a1a548b9a509e568bef29f8ab006ce6f1e74796232f00e88b72196576560","ssdeep":"","tlshash":"6ad0a55f51dc541245715c36165750163477942279045d5e5e1641842ff08abd32fd44","size":235,"data":"","first_seen":"2026-03-09T00:44:51.744454Z","last_seen":"2026-03-09T10:51:40.38038Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43e43272a9930e8ed8de1dbbba88229","sha1":"25799de2faff53d82a240edd79978ea77bcd5cfe","sha256":"44b6c840027a3ce4516c05d08ed4a38ea5f87d1d14469f3e317136d38df5dc1b","sha512":"48f8b50f7b8ec5c0e41ef30848a8d22aa26af42f8148adc15fbca3736b24013653abe8a7ae33040f5bb44c50aac71ac80ad93ec27e6a578ce25d78a45af89b0c","ssdeep":"","tlshash":"8b51638a17b5047c4aeb4f2f76af7a8aa033d9da1804e083418ddcc54af2d00921bb9d","size":2520,"data":"","first_seen":"2025-10-27T20:56:08.49616Z","last_seen":"2026-05-31T09:21:33.243443Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6e6eb0aa463d5c032c93136ab5bb936","sha1":"2c5dae2ad54779893f0808ee7a3b0b9b8521ebfe","sha256":"7ade6bbb556964f0ac83ef1ced5f59492c0153f79d66e2666dcdf9150b6d397e","sha512":"9b2504cec19c5d6d42a413cf5c6b5b2b4a10013cdfb6fdf8e119f973fe0778e6a1fff161de0fdf26d8779f5bf89de741725f9df298e1e5879c769137000548b4","ssdeep":"","tlshash":"5d318e85c69340050fb80527793fa095a634c43058da2cc7b0296bdcee9dbd1e6eddfa","size":1748,"data":"","first_seen":"2026-03-09T00:44:51.730994Z","last_seen":"2026-04-04T09:23:27.952572Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-24T14:51:41.594856Z","times_seen":732083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"43f057d9ebc51c310e6d330c6b49cdff","sha1":"6fd59fe7d31e2df4b243412b0196b59275d3c4e0","sha256":"790db882480e7759b4bd56a04c24e515e1860f4a1481ba2ddaf3a1652ca53474","sha512":"6b1dcf8c47b8a8ddd9ce982879fbc08b382186e9920b0d70c7dc6390b58ecf4acfdf3f3492f6e84f76bdd45edfb60493bffd189a009fa50d62583308737ea0a1","ssdeep":"","tlshash":"2d8000282cb8000e2838328ef3333330b0c202308800c200ce00000c3020803c2200c0","size":35,"data":"","first_seen":"2025-09-04T20:46:13.915016Z","last_seen":"2026-05-31T09:21:33.29745Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43e43272a9930e8ed8de1dbbba88229","sha1":"25799de2faff53d82a240edd79978ea77bcd5cfe","sha256":"44b6c840027a3ce4516c05d08ed4a38ea5f87d1d14469f3e317136d38df5dc1b","sha512":"48f8b50f7b8ec5c0e41ef30848a8d22aa26af42f8148adc15fbca3736b24013653abe8a7ae33040f5bb44c50aac71ac80ad93ec27e6a578ce25d78a45af89b0c","ssdeep":"","tlshash":"8b51638a17b5047c4aeb4f2f76af7a8aa033d9da1804e083418ddcc54af2d00921bb9d","size":2520,"data":"","first_seen":"2025-10-27T20:56:08.49616Z","last_seen":"2026-05-31T09:21:33.243443Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a40b6863db3aba64a1a839cd18540d13","sha1":"ead0eb6b110b4302edd3031c6643a5d77e8e428d","sha256":"d854b1160d197a891eda7a59064fba58c6050027c32d3be797bf803050b18b18","sha512":"f8bcb1aca98c1b212a97836729daefa07cc840c3522983e0408b0ae3304ddbb72cffd1741d4031ada4edceef1860768c6f4fd0cf999b34598f3e61b63b4e2b20","ssdeep":"","tlshash":"8ad0c96c5acd92023655584588a3529a1a3f58040775eb4bf47ee168bc801d086978ee","size":202,"data":"","first_seen":"2026-03-09T00:44:51.746761Z","last_seen":"2026-03-09T10:51:40.381422Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-common.min.bf6f533d4eb8f78d8cb0c8332f3304c2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e6841c7e724515d41eeab1aa6777061","sha1":"f1321b36efeef1d4ffb20921b2ff7ea17c344ce0","sha256":"c9fc932e5c9bc690da4f72f9dd0426649a5afaff06d1fb58f2be74b898f18d88","sha512":"956b9e2f812c085138aba996d4115b67f9af39dd6f2113075ca58ac1d3d6901c5af218c5340b97c25aa1a4f414e3f29dc6d90d7669072e9c2b7c0a3f17357177","ssdeep":"1536:XiNc9zjQd2Tll9BX2x01r9ZIHfQ/4S9E7cpND6:9NTT9BGx0RLIHKrD6","tlshash":"3153f8483462203b87df527638ff174c65328461b554c4db71aedaca2ff8e85522bb2e","size":65388,"data":"","first_seen":"2026-02-14T17:35:24.010022Z","last_seen":"2026-03-09T10:51:40.316677Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b221d0ffce7e3acb0ea2e47e2fbcc63a","sha1":"76810ec90da29033e1d07e906dffb45cf2934dcc","sha256":"d04abc24691ecef946e3b33b0709eb133a2b9677f697e24b797ee3d8577021f2","sha512":"e0bf89cf2a9268c5976f56fe9d4cdd55c5553ca55d58532a1a2b6090b1a6b2172c58aa0a28e234833982796181c1bf89790f0ed112ea60545be71f3249feb825","ssdeep":"","tlshash":"1cc02b1d19f6cc34e3422c0c236f3140f0037c30ccd73602814c30b42992042921b9cf","size":141,"data":"","first_seen":"2026-03-09T00:44:51.748422Z","last_seen":"2026-03-09T10:51:40.383501Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9f46da7ac54c9f24a44fe200d0fd266","sha1":"0ada65da272539c9774bc121d6676722e8feaebb","sha256":"9373508d55e451929d508f9c60acf26f4222535bfcd008d26415974c16ce617a","sha512":"d821f4c19ce92e2b45ac5dfd8fc00071549e49c614e8a46930df1d3bf48fa1c43acbe4892782f8020d47e918fffa24a5a558ae68793d7182c49aa8a86e89d3a9","ssdeep":"","tlshash":"4511992468f3107561bf307a0b9f6041732258eb600dea60bc1dead54ff0a2646aa6c8","size":1039,"data":"","first_seen":"2026-03-09T00:44:51.750045Z","last_seen":"2026-03-09T10:51:40.388089Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e206d98a719ab1c1cc6d260f7d15865e","sha1":"e1629505b0dcd82474fea769e4bd3e462d6fee2f","sha256":"701e901ae5cec0cfd711ab0b339e8751f39fd0d014c3080958473d001fec3df7","sha512":"8fb3cefc0cad3a88287710fc315c48741a2169e45f51641eefbdb943995490c27c6df6a4cfee8bb8187014756e5c4a1b71b3f912371610e7920b1e0a523bc392","ssdeep":"","tlshash":"87c092ca00ab04076013262a3a06b404b0b10a1a20897218b54c12edaf494ac0a17f89","size":132,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-04-04T09:23:27.963103Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d266d2244fa023fb5ab7185216dfc84a","sha1":"a1068b7cb4c3a0f7d819000879c26d9cb357faa4","sha256":"e14482291121cf901e5980ec52bf2d65c8b391eee19257bae99db50b74b4b072","sha512":"6cea5f2752bdcabb4871ef5973611bd3821e8a02df60b625a7ba966244516848cb666ff6f5a8b96b9291cf4b53639a5f080177d8f275949ece5df23b679eb9ee","ssdeep":"","tlshash":"18613481f3ac2952453721e15d3e658e337c80b15d034c7fee7061207be6f2e21569a5","size":3246,"data":"","first_seen":"2026-03-09T00:44:51.754293Z","last_seen":"2026-03-09T10:51:40.390202Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-jquery.min.bc9933f301aab450f9455035ae7c884d.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc9933f301aab450f9455035ae7c884d","sha1":"d7ba65e2de1f655619d27201159b768f13c6eda2","sha256":"bc57f2617a6fec0bb97905c5ed5ebce87508f9a803c697aa365101fb7d7255db","sha512":"38156d2daf075991ad9649f658bf08c4b24465f9ef5a741413488505de688e09227a0ec097413b975f834c94511732cf6909037ac24767d43c72ba9d2a1d5fb0","ssdeep":"3072:dFc5D45WQxvjbeelS3o654ZQkAZz3XyZ8sszUJaPixNYQh:dFMs5vZRAZznyGUJaPixNYQh","tlshash":"3ff3f8edb645207e93f731bbb07f571eb53a9a5748088081e15898b83cb8d0951abf7c","size":157821,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.193199Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2248fe15cd8b4deea3ef9249b213094","sha1":"9e373d82a2067db534cf97b149e28db818b28cf3","sha256":"3183ba23df6d3940416c700a56415e351ddeff7d9b71c723825b58409d99a2ef","sha512":"e3373dc4c482fccd902f4723ff670f807c93e0c02aa8d049dee1f013bc19558b7a0ad2bf52db8a1dfafaef29ea7e8fbbb2de60517b9ed2624fcfac76554b56f6","ssdeep":"","tlshash":"8431000c9caf609255677878662f9224717850a30f1abd30390c4b4a9fbe02f85f9fec","size":1695,"data":"","first_seen":"2026-03-09T00:44:51.756258Z","last_seen":"2026-04-04T09:23:27.953318Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"94af12dafa28d74e688923114cce5835","sha1":"194ef1e902765744a4cb81d099368182c1db5b50","sha256":"79f10a8f7a9b0548f357b9551d9d1535457697605134fa2782b56b0c60fc5a49","sha512":"22dad30b2092557a2919775d4a061927a2c2baae8ee36a41e0b9383ffd29abc17d3cb0fbcb3b433dafa5e4c4398110f9173af4a87b0a6c21d9625970f9a8ad0f","ssdeep":"","tlshash":"50113a6ee3ac2501a53375634b5b7a092a3a617769418c0f3c1a14c13ba689f972ef64","size":1063,"data":"","first_seen":"2026-03-09T00:44:51.758493Z","last_seen":"2026-04-04T09:23:27.953838Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0edb4b42fed693551bc4a65044556e77","sha1":"be06f9b603cc1bd7ba8226ad3cb33f3d5a32bdfa","sha256":"833900fd656fc7b8738563841a8cadc2d1d7fb7bea9bd11ea73f3e7c2f0e5acf","sha512":"e01563f2f248eed8220158f6c39f0439869b8e6c43b91816b0a5fc02a7f9289b1b353526bb4b41d47f7802abb763c107f02a30859ad46c83ad560b7bfe6a1cdf","ssdeep":"","tlshash":"5b81ba8ca9e78c128ee21532ff1ef5809a64c45329508c8cfd0de6578f94b9cd3ea5d5","size":3932,"data":"","first_seen":"2026-03-09T00:44:51.760434Z","last_seen":"2026-04-04T09:23:27.954759Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"5787007e0d059ceefccfbb8bdd147fdc","sha1":"e3d3b7000175f72b13578be6d2a5b6a862f43c57","sha256":"d5abb6cf4c5c77ca2c2f7810a272eb7a543ddc2b004583f19ab22daa5c6d5da0","sha512":"75ceb9e15fd8b159070ece8a32aaeb023b75381488f74f56e9cee0ab0cce981d515fb6d27aba320cea7487656e338a1ac08ee169988446f644b8ce458fa95bc7","ssdeep":"","tlshash":"cfa002291c76405c2032b1ddf333377170c302344040e504de50001c3032043c2518c0","size":61,"data":"","first_seen":"2025-09-04T20:46:13.918696Z","last_seen":"2026-05-31T09:21:33.299281Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c78852ee41156aac0823fba2042b4c8f","sha1":"af477a5f76d41a45d28f23e5ba88b7f7c6c3c31f","sha256":"19a26c2495dbf667648dba2d6c4b64bbe5ca6d0d64632a02b0257330d04c44bd","sha512":"10d7d3d4222a56fbf0abc5afdc860e0bea709ff217c0d6666d400c689c19a9e4429455218ed017e59440152d36980693ca2c0c56f9372a9f0fd572165cc65263","ssdeep":"","tlshash":"300128cebad6a1c71d3322372b7b4305383810cb7502c9157d9c91cb6f24a299f8b889","size":770,"data":"","first_seen":"2026-03-09T00:44:51.762135Z","last_seen":"2026-03-09T10:51:40.392604Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/checklist/clientlib.min.03ce14b7059f6d7cb1c201a465f04ccb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ce14b7059f6d7cb1c201a465f04ccb","sha1":"270b23493596862cdf8a875c86a940d696b87e4e","sha256":"d19a0a46a561a922196172b6efa044fe53911026198f18f5985288b8f57ae47a","sha512":"953062f4807a049e99205307bd1a0e7789255e93c27ba116cecedc0497bcae1a0fb0dcdb72daa89764d67ddbde4a62dd4fbb6ef7be7d23e93c7bad6ac19e33fd","ssdeep":"96:3I6XE3obhIST1qR63dzqCNWmhvS1UMQQbipqrobu8C0MEwhycKJuFfFXeT0EK4Bo:3I6XEY6ST10+5LWmhvS1UMQQG80y8C0g","tlshash":"2aa111a42601607dd6f72177282f2f39f437b712fa24d58816ed88a805acec5525fb2a","size":4946,"data":"","first_seen":"2025-01-02T08:50:11.27218Z","last_seen":"2026-05-31T09:21:33.246855Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6d7264019032e3edc5803d0b3187ace","sha1":"49fa14abe0d7bf25d1429c4d3c37c827290e12f7","sha256":"b2c2935b4bd3a33ee8c245118b5834663a50a07c4b0d7e0f1a223d3837af65cc","sha512":"60f226a42a1483fc97a19fa337a39984676dd92f8db715512c978018cd515bd0150ab5c6a74aac45b0ad778c07510d037c39f959ca54cf1ad651c92389afa303","ssdeep":"","tlshash":"c5b0124467f4851c97217f022ab867f33e24f27b90c5a40b504aac7855c4cd1e05a473","size":107,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-05-31T09:21:33.299971Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"871a57e91f70b67f0bfd285e36cf2169","sha1":"3138b71e1352620422540ee5d46da78ad6b60d2d","sha256":"fce586c653bd071b7ba76a3df0d732ddf5ada287579f824a26594573cb9c8c20","sha512":"83447f764b8b2ae846651ae75a287beb34f5348773207208972f8afa87367e4478737d43c3e780c56e07e97ad696bb9b9707c80602c1eafb19860f2129dc1a20","ssdeep":"192:W0rqPKxOxaISWktcibWZgs4rlE00nwDW8KGJGt:V4KxsvxktcibWZgs4rlE00nwDW8KGJGt","tlshash":"cdd182e572190fb71acf6577343f834cb376006dd0040b68ae699af85570d89a82afb9","size":6644,"data":"","first_seen":"2025-06-06T13:25:36.015348Z","last_seen":"2026-05-31T09:21:33.290298Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/utils.min.92dfced096519807663ae4cf894d79f2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"92dfced096519807663ae4cf894d79f2","sha1":"9d84ca7e7cb0f35df728eb8c72295106519f5d6b","sha256":"3c6288d023a7504044a7a23002ad9266f5e0d52530a9d250bab325f076889b77","sha512":"1acae7d98bfdf9f1758aa011e168abddc20698b56a50be16fbe32c53897c30ad53d80bdb40ff4bc8dd9d8a8d8e805cc0d3466c2c0867b3fbb82d998f80920a42","ssdeep":"192:h9Mmr9HdWrOG894QJGTNm96jLhOe7aWVmfIhmppb6Q8PW9BTk9A/9Tuu:h9r9Hd99Mm9AOe+9BTk9A9Tuu","tlshash":"ac42f99a71cba06743ab2270166f9b0af07b4859944ee091c1f6d9f13cf4d8e8057f7a","size":12061,"data":"","first_seen":"2024-05-24T10:15:23Z","last_seen":"2026-05-31T09:21:33.209014Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"36742221bdcf04e3ad7a1e441878fc16","sha1":"f53b13e34a59b3d6acdd3bcb6b2266cced0ae21a","sha256":"d7f011fdc9c97a3c9b5ee7e69441c9ea35c557abd007d7fe6cfa4b76cb69bbe7","sha512":"535e9a0691080dbfc9856cc1457ea17397150a01a334e2af06d2cf6cc3f0aa84dceb6dfec679e71a026646e9120407ad39a914113ee1fff765dc5e35f6a0a2f0","ssdeep":"","tlshash":"190146caa6da92d61d332133637f4301383862cb3002c911bebcd2cb5f249291b8b985","size":696,"data":"","first_seen":"2026-03-09T00:44:51.764103Z","last_seen":"2026-03-09T10:51:40.394393Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery.min.5fbcca76f439884194ba1eaafc5d91dd.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbcca76f439884194ba1eaafc5d91dd","sha1":"474ee00912022a660f2c3dc64e659ab610c84588","sha256":"5792f1d00ee4f6148dbfb85b36a059aea4fb666e98eb76b1a5006858692374f3","sha512":"75e7882b53c4bb19eeb09c27562f8eb266a81b76893b88aa404b8f79289a2c60e93754b564bfbf75ae83a52779396aa0103128a98df86bfe49e62e1693b07e86","ssdeep":"3072:iiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6Cqax7:ihhryUA3n6em3Yjx7","tlshash":"48e3faedba45207e93f731bbb47f4b1e753a966748188081e16898b83cb4d0450abf7d","size":152373,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.275148Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a2baa6ee0b6231f225593079488862a","sha1":"4ba520b5d924b6580052172bdf846c238f63ae0b","sha256":"72037a0cfcec507f11c3d04b4f65dd7e76f6745efc23c69bcaaf705e5cb7421d","sha512":"8b8ee9c4a49105c7875f146607a9130fc052cbcc59f9b9181b4ce4a6e92c59e2ad14de1c418709756b6b03e09dd0a6eb95600e8b897a6b77b2f4fba91fba8983","ssdeep":"","tlshash":"53f052ca95c5a1e61c33212367ab0300383812933003cd107e9ce2435f649181e8f868","size":586,"data":"","first_seen":"2026-03-09T00:44:51.76586Z","last_seen":"2026-03-09T10:51:40.396069Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea91a20d74105ed20327f6b728834e9c","sha1":"0c30bcb363ec82c1ff6b2eae62e50f8c77e16ee3","sha256":"7b48ee0da432984c434a89696296234bdc0328c3a4a7dff152940c4efac80fa4","sha512":"6a82ea008ef4cb7ce6fb31e2253d8292001b31006385a516b19604b7fa5a8d3b40745b5097f45f871ceed51edeecacfbd10f83963367e596fb4b46ebbc150f3a","ssdeep":"","tlshash":"b0313889a7a94bc71e3320732bbf5204b934b5c72006fd11391c97ce6f14e7246adb51","size":1464,"data":"","first_seen":"2026-03-09T00:44:51.767516Z","last_seen":"2026-03-09T10:51:40.396886Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"43f057d9ebc51c310e6d330c6b49cdff","sha1":"6fd59fe7d31e2df4b243412b0196b59275d3c4e0","sha256":"790db882480e7759b4bd56a04c24e515e1860f4a1481ba2ddaf3a1652ca53474","sha512":"6b1dcf8c47b8a8ddd9ce982879fbc08b382186e9920b0d70c7dc6390b58ecf4acfdf3f3492f6e84f76bdd45edfb60493bffd189a009fa50d62583308737ea0a1","ssdeep":"","tlshash":"2d8000282cb8000e2838328ef3333330b0c202308800c200ce00000c3020803c2200c0","size":35,"data":"","first_seen":"2025-09-04T20:46:13.915016Z","last_seen":"2026-05-31T09:21:33.29745Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43e43272a9930e8ed8de1dbbba88229","sha1":"25799de2faff53d82a240edd79978ea77bcd5cfe","sha256":"44b6c840027a3ce4516c05d08ed4a38ea5f87d1d14469f3e317136d38df5dc1b","sha512":"48f8b50f7b8ec5c0e41ef30848a8d22aa26af42f8148adc15fbca3736b24013653abe8a7ae33040f5bb44c50aac71ac80ad93ec27e6a578ce25d78a45af89b0c","ssdeep":"","tlshash":"8b51638a17b5047c4aeb4f2f76af7a8aa033d9da1804e083418ddcc54af2d00921bb9d","size":2520,"data":"","first_seen":"2025-10-27T20:56:08.49616Z","last_seen":"2026-05-31T09:21:33.243443Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/bandeau-alertes/clientlib.min.e7d754b2e0b560ec227b038facf9c4eb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7d754b2e0b560ec227b038facf9c4eb","sha1":"dd85882c359b0624b657b7707117926557a4e50e","sha256":"7a491de481cb3daedd1cf9d1ab809fd8410dbe7d295d3475dfd1b15679a97d7f","sha512":"1daf79efb61a9013fc0e78873375794179a84a303968593fb40efbddab1866f1253a329fbf7ef763d5f636d83779cb03536744fd9f8245028f271a7d12d1d92f","ssdeep":"96:AVcC4lJCUZucxXCsPxQtzCX3Gm4b5DsVvs1xQ/CWcBC9nfdsDmzkqIu4u:AVcC4HCUZhCTCnL3ClBC9Mmzk1u","tlshash":"7da1ec1826332943dbb605a814fe85e0b833ac449369820157af6765b2f9cc67c3dad3","size":5024,"data":"","first_seen":"2025-08-09T08:36:15.204588Z","last_seen":"2026-03-09T10:51:40.353531Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"625daf086de5fa5efecbcbd46f54c575","sha1":"441ed26f83bcc1ae2705b778e7e95d533c0c0a1d","sha256":"cca6e07d65d32aedcf9d4ddf93f40f55d6125fc7c23496ac7a7de841e1633ea6","sha512":"2d3b0eb8663910d0cc027bf521730049cf5b37903e9df591509ba1cd36a806024c9daf13235ef53229a8c5d6e38400db28d45ff6c109884dcecd018170063709","ssdeep":"","tlshash":"46519578f3960828d1513081dd6aa0cc487830a31252c156badceb6daf20f95f9f99f7","size":2489,"data":"","first_seen":"2026-03-09T00:44:51.73894Z","last_seen":"2026-03-09T10:51:40.373454Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"524e19629f1c6fdfa75cd1a99d6acbbf","sha1":"126e8147cc7f40d421cda549d1f8637ceb482f2b","sha256":"3f4bb276f60906e33eaf34ea828816d36d58e930fd0ada127300171a37e61eb0","sha512":"778c4d46747390167d04c3a9cf283ea2624ec654302619436dd23d9e156d2c6756b74d9d4b4b74389b9a790d044ef2c9568294b9f89f13f34582e60c74344db3","ssdeep":"6144:GNL1Hc08cLKRUyDUdbM3gOB1icd3YuDM8IEyk/o5vdg67A:GF1T8cLKR3Ud6/B1icdoL81h/R","tlshash":"aea4289a7601213e47ff31ba906f0b0eb13a9a6644489069f478c9e83db4c4561bff7d","size":480248,"data":"","first_seen":"2025-12-10T20:04:17.971663Z","last_seen":"2026-05-31T09:21:33.21562Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5787007e0d059ceefccfbb8bdd147fdc","sha1":"e3d3b7000175f72b13578be6d2a5b6a862f43c57","sha256":"d5abb6cf4c5c77ca2c2f7810a272eb7a543ddc2b004583f19ab22daa5c6d5da0","sha512":"75ceb9e15fd8b159070ece8a32aaeb023b75381488f74f56e9cee0ab0cce981d515fb6d27aba320cea7487656e338a1ac08ee169988446f644b8ce458fa95bc7","ssdeep":"","tlshash":"cfa002291c76405c2032b1ddf333377170c302344040e504de50001c3032043c2518c0","size":61,"data":"","first_seen":"2025-09-04T20:46:13.918696Z","last_seen":"2026-05-31T09:21:33.299281Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f3a3565b81ca5b2206ae3298afdb3bc","sha1":"e1c343bd6267f39603f39c5ca2cf04e54cb16bbe","sha256":"bb0092ed74648d17e5e9f5efcdf8a80be7c1106b0e0fef919d1c1d3b0637dc23","sha512":"ad4fd96065caa7b8e3ee9a9e0295b7acfac4467528686d5050be725e8b07e88ffc417b88b3a19fc9bcb8361412262d7b5c345cdf8578e470fa39eb10a741dbbf","ssdeep":"","tlshash":"42d0c00c0019053404fb009f08ab41447470000fee08c0313c0c111a6f4068059c46f4","size":195,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-04-04T09:23:27.957838Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-24T14:52:31.880335Z","times_seen":235936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3092e54883bc10d5a67a98f83949539c","sha1":"90b31754c441acc631f5d34e54548d319f463f76","sha256":"9161119800ab6f1f32516de0466c9d4643fbe9c24630044e8e4393f13e24933c","sha512":"3c10bd1d625bee879b0807e0828ad11ad4a50c8ac10c5b11d70f500a20710679b17bd182264c40eb8bf5e35d07c036a5d85e8de9af9025fc5b03e7f8e216305d","ssdeep":"96:xtRQHaUhmFUdWc+T/cZYceCNEc+cOocV8clYcAf7cE1f9EcPDOKbHtcQUGc5:xtmm9c+7cZYcDNEc+cOocV8clYcADcKa","tlshash":"4d81f3ee72d8218213bb50f8562fd55e25b3e37314884084e224dbf69db5908ca53f38","size":4128,"data":"","first_seen":"2025-06-06T13:25:36.055417Z","last_seen":"2026-05-31T09:21:33.28378Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibPageErreur.min.f434b09157730b423058e364dda8b336.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8839fe33194c9000cc55bbe746b3410c","sha1":"5cc324000fd0cadb3e1275c0529de8ef4952d5ca","sha256":"d86a02c12c388518b78b95e11603ca87ef134b05a3d0ad125426258ac65501f2","sha512":"fa5ae674bec594ee8d28877df0623e75f5ab1f05ba32b1695a9b0aa1b723bafbf4056866739af8fbd40fbfd1e43e6b25e0c60bcb004a9fb1fa30c4e5477e89e6","ssdeep":"","tlshash":"21310159b1402025277e27b62727348d3a365cf55544c0b4f0be81d57ee0f366a2fb1c","size":1781,"data":"","first_seen":"2026-03-09T00:44:51.712377Z","last_seen":"2026-03-09T10:51:40.355651Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"83068ea641f8f93011c237c27b4d893a","sha1":"ac3af07ecdcbab8556972589db65894323b9f005","sha256":"3c76241a830584cfce7b6cb3f4c32169cf4fe45e7e6aa4a410818b79c186fb6d","sha512":"8ed016ff40db9267d9241b4ff2becfa2899589672ec4f2b746c0194cc1f621022186a5b4a578613755859f8fa50dc24c394717f719bd2b4989297a9b6dee7150","ssdeep":"","tlshash":"66d0a7ae00e91435001b61700c5dec079222e057018d2992b96c5c5eaf811e95e14de1","size":234,"data":"","first_seen":"2026-03-09T00:44:51.770969Z","last_seen":"2026-04-04T09:23:27.958568Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f54e4ac130d98b9bb883b17cd01c3108","sha1":"5fc0e907e9cc27c258ed76d5c48c829cf6af8b98","sha256":"5f104dd4349eb9fb3ca9a9bd31e8f996c744a63df8587c5a98101f226543f5ea","sha512":"9293545e076c2021ee5af6d8b71ae509bf92c65f1425321d750a8d3d7bc36d136e942827821a2e8ac855f0e0025f2e304fe5085e01a656a9afe863b31de2a1c1","ssdeep":"","tlshash":"6c411e5afda6625154b3305d6f3bc648793e200b3104dc00bd4dc8da1f1da39c6e5ed8","size":2007,"data":"","first_seen":"2026-03-09T00:44:51.7728Z","last_seen":"2026-04-04T09:23:27.959086Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"871a57e91f70b67f0bfd285e36cf2169","sha1":"3138b71e1352620422540ee5d46da78ad6b60d2d","sha256":"fce586c653bd071b7ba76a3df0d732ddf5ada287579f824a26594573cb9c8c20","sha512":"83447f764b8b2ae846651ae75a287beb34f5348773207208972f8afa87367e4478737d43c3e780c56e07e97ad696bb9b9707c80602c1eafb19860f2129dc1a20","ssdeep":"192:W0rqPKxOxaISWktcibWZgs4rlE00nwDW8KGJGt:V4KxsvxktcibWZgs4rlE00nwDW8KGJGt","tlshash":"cdd182e572190fb71acf6577343f834cb376006dd0040b68ae699af85570d89a82afb9","size":6644,"data":"","first_seen":"2025-06-06T13:25:36.015348Z","last_seen":"2026-05-31T09:21:33.290298Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery/granite.min.f9fccbe1ad2b43c0698e504caf1a9c31.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fccbe1ad2b43c0698e504caf1a9c31","sha1":"ad069936c269a5d87f6b0f51e7e630af425bb471","sha256":"0ba744e3f4c5487082da84271df5c04788510830b5a20e7f9ac2a6ec9da7bfc1","sha512":"b7ddf2db5201826fbc3f8ec930dafcd701efc346d74d563a7fee5e35688506a2db2176525611aa7e705e54d54875bf942b785b2b6bb893adfb54534062e93ca6","ssdeep":"96:tLTd4lB3A4dCYRRl60N4wNwkGQeWHuDcOCnQDh4ECaIx9UGt:YlB3A4dz20+wEMCcOoQDhLpu","tlshash":"15c1c44b6cd0207397f361b8a5ff2a02b1326229a44c94a16458d9f83dffd879227f0d","size":5797,"data":"","first_seen":"2025-10-27T20:56:08.508784Z","last_seen":"2026-05-31T09:21:33.197526Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-24T14:51:41.594856Z","times_seen":732083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a7b81d9f6577a5a629a06204c34c503","sha1":"16ff908a6d3f6fd5059fcb8933eb38a5b61f20a4","sha256":"f45e57325c60e925c45b1907db884b9d79b755a8158628108a18278b8ad0c42a","sha512":"1d89e96b0bb3ebb8133aeed9113dea95bdb01cd8cf338eeffaa7e89ade7364593c9b99b269509e33edf7ca2ef0adf61c9c6217f08cf0cba2a9c915c428db6c6f","ssdeep":"","tlshash":"f461cb7af2eb95d21273326f3f3b42446c3e5087f002ec26bd5cee859f051198626a5e","size":3249,"data":"","first_seen":"2026-03-09T00:44:51.774936Z","last_seen":"2026-04-04T09:23:27.959968Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/bandeau-alertes/clientlib.min.e7d754b2e0b560ec227b038facf9c4eb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7d754b2e0b560ec227b038facf9c4eb","sha1":"dd85882c359b0624b657b7707117926557a4e50e","sha256":"7a491de481cb3daedd1cf9d1ab809fd8410dbe7d295d3475dfd1b15679a97d7f","sha512":"1daf79efb61a9013fc0e78873375794179a84a303968593fb40efbddab1866f1253a329fbf7ef763d5f636d83779cb03536744fd9f8245028f271a7d12d1d92f","ssdeep":"96:AVcC4lJCUZucxXCsPxQtzCX3Gm4b5DsVvs1xQ/CWcBC9nfdsDmzkqIu4u:AVcC4HCUZhCTCnL3ClBC9Mmzk1u","tlshash":"7da1ec1826332943dbb605a814fe85e0b833ac449369820157af6765b2f9cc67c3dad3","size":5024,"data":"","first_seen":"2025-08-09T08:36:15.204588Z","last_seen":"2026-03-09T10:51:40.353531Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96f2aab51d64deba1c946a0cc5ee7ff3","sha1":"b6238c42f036911198656c6c0dd6813b5388de5f","sha256":"f545be47dee03e860e8d2f188e6bab5f687c0d53d81669e0dc9ccb184fbfc64a","sha512":"811e0697edef24b9d42c24221211928070ea9169761ea8a250530f2f3be459462f154cd5520a56457a07aeea3e7830eb653c1fe3ed118ddbb161871dcfe69c70","ssdeep":"384:8WM3EsEC59MPSyGflSycGhytv8nhZPCUQ2ua1SJraBV2P+rdRINvnEE2ilvXq5U7:8zEsEC59MKyw0yBh6G+PzT22XgUW+","tlshash":"19a2f99db559563a83bf243a25af05187a37ed764e88c001e05e98e13af4e4103efe7c","size":23241,"data":"","first_seen":"2025-10-27T20:56:08.510928Z","last_seen":"2026-05-31T09:21:33.233208Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/checklist/clientlib.min.03ce14b7059f6d7cb1c201a465f04ccb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ce14b7059f6d7cb1c201a465f04ccb","sha1":"270b23493596862cdf8a875c86a940d696b87e4e","sha256":"d19a0a46a561a922196172b6efa044fe53911026198f18f5985288b8f57ae47a","sha512":"953062f4807a049e99205307bd1a0e7789255e93c27ba116cecedc0497bcae1a0fb0dcdb72daa89764d67ddbde4a62dd4fbb6ef7be7d23e93c7bad6ac19e33fd","ssdeep":"96:3I6XE3obhIST1qR63dzqCNWmhvS1UMQQbipqrobu8C0MEwhycKJuFfFXeT0EK4Bo:3I6XEY6ST10+5LWmhvS1UMQQG80y8C0g","tlshash":"2aa111a42601607dd6f72177282f2f39f437b712fa24d58816ed88a805acec5525fb2a","size":4946,"data":"","first_seen":"2025-01-02T08:50:11.27218Z","last_seen":"2026-05-31T09:21:33.246855Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibMireAuthentification.min.ddd95a2671d580c4e32a6c4f847bbfdc.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d29d46da8d499825b1306e0200161e89","sha1":"2452679bcc7ea6ac8b7e85977fb4bfb4d4fdf940","sha256":"71db04f55a83534372faa6e36d51f5126f0734ce10d09e96f47527cc1bf1f487","sha512":"9c5c70735312d126cd8353eaef1ff2e7e23cdb86118b68833993245d371d6a0cac99375e787e041b419dc94f83f9e76284414d1faa4016ecf6a048a580142c37","ssdeep":"384:KbPLzVuFpusipEDNr2UzBd/YVseZdJiPDBgL1OUpU4zRV2DL9My:KjLzVuFpuw52onY9JiPqpkARV2P9My","tlshash":"87b2b64cf0500ec285fa53fcb02965b5b0794ea14a92da30c63f569563acf8f4e27e97","size":23530,"data":"","first_seen":"2026-03-09T00:44:51.689493Z","last_seen":"2026-03-09T10:51:40.354556Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"54a537ea7ac191c4fc645394ddae61a3","sha1":"587e4b4f4dbe7fbaccc9c36f5e5454a76e191c82","sha256":"551b5045633d8c1ad954356e423c5319b23bd8e188de99d24fb77660de939a1d","sha512":"b9ed8de5472a9952a6b76df6b9ce964b0ad1b4ebc70f9a8d0a2502f1e99b3179b6f5ca333f305a6b9f2767c1965917a07f61081c1b813272a6a40fddf609ee24","ssdeep":"","tlshash":"c411cb0b7db334c1412321b42f6b592d3436650b1158fc00fe4e944b0f6dca8e5e5be4","size":862,"data":"","first_seen":"2026-03-09T00:44:51.776841Z","last_seen":"2026-04-04T09:23:27.960924Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a956c2a84b320266623eb38e9f8443c","sha1":"e28a27b451b11d101310f23453ecff50822b77e2","sha256":"aac1a013b17599a641c10f55ba4e70125777beafb54cda6d8ca747a302eb7acf","sha512":"20442590b67489feccb982b0dd872dcaa605a3bbabe9111772c435e4d329477546c01a3db38866a22e7791a36b84d8c6ad99bb519209429eb0abcb43ce21206a","ssdeep":"","tlshash":"e4d05e0de266022018dd437d72ba25784f324047313dca47366f9b883f9ce440366a99","size":274,"data":"","first_seen":"2026-03-09T00:44:51.743054Z","last_seen":"2026-03-09T10:51:40.375146Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f07a8594473b6ae1135167d8b47fc3df","sha1":"952f8da79f7ef5537158f8abbf61e7b524507bad","sha256":"828672e4bcdbfd00a5cadf6ab51ef57f57e4c9b22ab4097d7166b0e38f73fdaa","sha512":"7442121058d8856d9cdd6a3c62c5b07c661a8ccf4a6d71d905aaa55dc1c396a013fa3f0babfd224bbd8772ba769f621a8ce9f149d9ba5ba9cea92849a3298787","ssdeep":"","tlshash":"f221cc1429e2207550ff307d0b9f6506b33399eb640eda60bc1deb914ff0a6656aa6c8","size":1186,"data":"","first_seen":"2026-03-09T00:44:51.77896Z","last_seen":"2026-04-04T09:23:27.962173Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e206d98a719ab1c1cc6d260f7d15865e","sha1":"e1629505b0dcd82474fea769e4bd3e462d6fee2f","sha256":"701e901ae5cec0cfd711ab0b339e8751f39fd0d014c3080958473d001fec3df7","sha512":"8fb3cefc0cad3a88287710fc315c48741a2169e45f51641eefbdb943995490c27c6df6a4cfee8bb8187014756e5c4a1b71b3f912371610e7920b1e0a523bc392","ssdeep":"","tlshash":"87c092ca00ab04076013262a3a06b404b0b10a1a20897218b54c12edaf494ac0a17f89","size":132,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-04-04T09:23:27.963103Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3092e54883bc10d5a67a98f83949539c","sha1":"90b31754c441acc631f5d34e54548d319f463f76","sha256":"9161119800ab6f1f32516de0466c9d4643fbe9c24630044e8e4393f13e24933c","sha512":"3c10bd1d625bee879b0807e0828ad11ad4a50c8ac10c5b11d70f500a20710679b17bd182264c40eb8bf5e35d07c036a5d85e8de9af9025fc5b03e7f8e216305d","ssdeep":"96:xtRQHaUhmFUdWc+T/cZYceCNEc+cOocV8clYcAf7cE1f9EcPDOKbHtcQUGc5:xtmm9c+7cZYcDNEc+cOocV8clYcADcKa","tlshash":"4d81f3ee72d8218213bb50f8562fd55e25b3e37314884084e224dbf69db5908ca53f38","size":4128,"data":"","first_seen":"2025-06-06T13:25:36.055417Z","last_seen":"2026-05-31T09:21:33.28378Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9113a252ae5ee8223804d193ff7650e","sha1":"a86e69b3493154d9e67bf0e5522272bbd389cb20","sha256":"0ddbc01a8f2f70954d5e1f064acabd8c59047048ab03eeeff75c6e6923cb0d0a","sha512":"08605987edf922013b412ec7c8f7735a29a038859bca787291daae80a8825e015098a1a548b9a509e568bef29f8ab006ce6f1e74796232f00e88b72196576560","ssdeep":"","tlshash":"6ad0a55f51dc541245715c36165750163477942279045d5e5e1641842ff08abd32fd44","size":235,"data":"","first_seen":"2026-03-09T00:44:51.744454Z","last_seen":"2026-03-09T10:51:40.38038Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"871a57e91f70b67f0bfd285e36cf2169","sha1":"3138b71e1352620422540ee5d46da78ad6b60d2d","sha256":"fce586c653bd071b7ba76a3df0d732ddf5ada287579f824a26594573cb9c8c20","sha512":"83447f764b8b2ae846651ae75a287beb34f5348773207208972f8afa87367e4478737d43c3e780c56e07e97ad696bb9b9707c80602c1eafb19860f2129dc1a20","ssdeep":"192:W0rqPKxOxaISWktcibWZgs4rlE00nwDW8KGJGt:V4KxsvxktcibWZgs4rlE00nwDW8KGJGt","tlshash":"cdd182e572190fb71acf6577343f834cb376006dd0040b68ae699af85570d89a82afb9","size":6644,"data":"","first_seen":"2025-06-06T13:25:36.015348Z","last_seen":"2026-05-31T09:21:33.290298Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3092e54883bc10d5a67a98f83949539c","sha1":"90b31754c441acc631f5d34e54548d319f463f76","sha256":"9161119800ab6f1f32516de0466c9d4643fbe9c24630044e8e4393f13e24933c","sha512":"3c10bd1d625bee879b0807e0828ad11ad4a50c8ac10c5b11d70f500a20710679b17bd182264c40eb8bf5e35d07c036a5d85e8de9af9025fc5b03e7f8e216305d","ssdeep":"96:xtRQHaUhmFUdWc+T/cZYceCNEc+cOocV8clYcAf7cE1f9EcPDOKbHtcQUGc5:xtmm9c+7cZYcDNEc+cOocV8clYcADcKa","tlshash":"4d81f3ee72d8218213bb50f8562fd55e25b3e37314884084e224dbf69db5908ca53f38","size":4128,"data":"","first_seen":"2025-06-06T13:25:36.055417Z","last_seen":"2026-05-31T09:21:33.28378Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"524e19629f1c6fdfa75cd1a99d6acbbf","sha1":"126e8147cc7f40d421cda549d1f8637ceb482f2b","sha256":"3f4bb276f60906e33eaf34ea828816d36d58e930fd0ada127300171a37e61eb0","sha512":"778c4d46747390167d04c3a9cf283ea2624ec654302619436dd23d9e156d2c6756b74d9d4b4b74389b9a790d044ef2c9568294b9f89f13f34582e60c74344db3","ssdeep":"6144:GNL1Hc08cLKRUyDUdbM3gOB1icd3YuDM8IEyk/o5vdg67A:GF1T8cLKR3Ud6/B1icdoL81h/R","tlshash":"aea4289a7601213e47ff31ba906f0b0eb13a9a6644489069f478c9e83db4c4561bff7d","size":480248,"data":"","first_seen":"2025-12-10T20:04:17.971663Z","last_seen":"2026-05-31T09:21:33.21562Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"524e19629f1c6fdfa75cd1a99d6acbbf","sha1":"126e8147cc7f40d421cda549d1f8637ceb482f2b","sha256":"3f4bb276f60906e33eaf34ea828816d36d58e930fd0ada127300171a37e61eb0","sha512":"778c4d46747390167d04c3a9cf283ea2624ec654302619436dd23d9e156d2c6756b74d9d4b4b74389b9a790d044ef2c9568294b9f89f13f34582e60c74344db3","ssdeep":"6144:GNL1Hc08cLKRUyDUdbM3gOB1icd3YuDM8IEyk/o5vdg67A:GF1T8cLKR3Ud6/B1icdoL81h/R","tlshash":"aea4289a7601213e47ff31ba906f0b0eb13a9a6644489069f478c9e83db4c4561bff7d","size":480248,"data":"","first_seen":"2025-12-10T20:04:17.971663Z","last_seen":"2026-05-31T09:21:33.21562Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"81ca6bc4e527938d685b5c3ec40f3817","sha1":"efa543e46358bead157cc82734f3f0a150927842","sha256":"ea78c8ffb8d5895ce6cc7808114b552342fbe323d228c7448fd7123852aa26e9","sha512":"2b0e40c7661fb9802fac09e41da627be1f76fa79a0b3094cddb7b5355250cad3a6abdc8c70b16d9bdc9aa60dbd0ca47c62448ce39c8132baf00e8a7576d49891","ssdeep":"96:Pl4wh0Xale/KlJqlnMlYl08BPnshDhFw6Ql5:uXv/scF08eNAJ","tlshash":"88a1bc0c8aafd1d1e6dd24bff11fc168ac35825791f9182ad3d536d9c804289c8a5fab","size":5080,"data":"","first_seen":"2026-03-09T00:44:51.780975Z","last_seen":"2026-04-04T09:23:27.963635Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-npc-components.min.76b20c6ed6d4bfd9df1acd03da674f60.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb6722b1c06a8acda25b74209cd9cb4","sha1":"e7c83db08cd0f3c8164177edc44f99fd99e00632","sha256":"3fedccf733d0dbbc9330dd2fed75d4ef0204a6a9fa2475b03ab6a83930973cfc","sha512":"43bf99ba0bcf8f59cd015f714335d4ba0e0de5245db26e3dbdebca669f6b7e53e1dab5732bfe9050e3b6abbeabd41ad47d03dd671fb09323fcae58e6b76104d6","ssdeep":"12288:LfGx0RcDtgdXCow2hSzQeAwiCK8NEh9yq9fc3H66DBaofQrPSL+FBEwPDeTbo0:LfGx0R/ef0sq9fuH66DgoI80BvPD0Z","tlshash":"be253948b310353a81ef62ba206f2a0eb23755659501c08cf579d9de1ebce4921bbf7d","size":1013569,"data":"","first_seen":"2026-02-14T17:35:23.935007Z","last_seen":"2026-03-09T10:51:40.363Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bv-chat.credit-agricole.fr/oic-services/js/bver.js","fqdn":"bv-chat.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"65525de9318a157f13e013e0f345a8cd","sha1":"6301c53d4a99cc54243f56c3b928140718634ee1","sha256":"193dc2f52546fb3548d059722063e76ee6f821ad8f6c6793d92a911a194f651d","sha512":"6875f3acff7162cca18e387d2dd9cd9708f774128eee1bfe5b7387391e32ef31dcb8ca965e833cf202f51ec6cec92614d02708f46e0ea5be6e0537f7a3042577","ssdeep":"768:+/uAmW6dytQjoroTaoFqkLkO4F27I4AoPI:+hmryyoruBTEP/","tlshash":"30b2b6e6ff9d2f358926e197989e61c6d13cd43a2d048875fc8cf86841dc82ad01eed9","size":24597,"data":"","first_seen":"2025-06-06T13:25:36.000829Z","last_seen":"2026-05-31T09:21:33.269769Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"a40b6863db3aba64a1a839cd18540d13","sha1":"ead0eb6b110b4302edd3031c6643a5d77e8e428d","sha256":"d854b1160d197a891eda7a59064fba58c6050027c32d3be797bf803050b18b18","sha512":"f8bcb1aca98c1b212a97836729daefa07cc840c3522983e0408b0ae3304ddbb72cffd1741d4031ada4edceef1860768c6f4fd0cf999b34598f3e61b63b4e2b20","ssdeep":"","tlshash":"8ad0c96c5acd92023655584588a3529a1a3f58040775eb4bf47ee168bc801d086978ee","size":202,"data":"","first_seen":"2026-03-09T00:44:51.746761Z","last_seen":"2026-03-09T10:51:40.381422Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/checklist/clientlib.min.03ce14b7059f6d7cb1c201a465f04ccb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ce14b7059f6d7cb1c201a465f04ccb","sha1":"270b23493596862cdf8a875c86a940d696b87e4e","sha256":"d19a0a46a561a922196172b6efa044fe53911026198f18f5985288b8f57ae47a","sha512":"953062f4807a049e99205307bd1a0e7789255e93c27ba116cecedc0497bcae1a0fb0dcdb72daa89764d67ddbde4a62dd4fbb6ef7be7d23e93c7bad6ac19e33fd","ssdeep":"96:3I6XE3obhIST1qR63dzqCNWmhvS1UMQQbipqrobu8C0MEwhycKJuFfFXeT0EK4Bo:3I6XEY6ST10+5LWmhvS1UMQQG80y8C0g","tlshash":"2aa111a42601607dd6f72177282f2f39f437b712fa24d58816ed88a805acec5525fb2a","size":4946,"data":"","first_seen":"2025-01-02T08:50:11.27218Z","last_seen":"2026-05-31T09:21:33.246855Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/utils.min.92dfced096519807663ae4cf894d79f2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"92dfced096519807663ae4cf894d79f2","sha1":"9d84ca7e7cb0f35df728eb8c72295106519f5d6b","sha256":"3c6288d023a7504044a7a23002ad9266f5e0d52530a9d250bab325f076889b77","sha512":"1acae7d98bfdf9f1758aa011e168abddc20698b56a50be16fbe32c53897c30ad53d80bdb40ff4bc8dd9d8a8d8e805cc0d3466c2c0867b3fbb82d998f80920a42","ssdeep":"192:h9Mmr9HdWrOG894QJGTNm96jLhOe7aWVmfIhmppb6Q8PW9BTk9A/9Tuu:h9r9Hd99Mm9AOe+9BTk9A9Tuu","tlshash":"ac42f99a71cba06743ab2270166f9b0af07b4859944ee091c1f6d9f13cf4d8e8057f7a","size":12061,"data":"","first_seen":"2024-05-24T10:15:23Z","last_seen":"2026-05-31T09:21:33.209014Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/bandeau-alertes/clientlib.min.e7d754b2e0b560ec227b038facf9c4eb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7d754b2e0b560ec227b038facf9c4eb","sha1":"dd85882c359b0624b657b7707117926557a4e50e","sha256":"7a491de481cb3daedd1cf9d1ab809fd8410dbe7d295d3475dfd1b15679a97d7f","sha512":"1daf79efb61a9013fc0e78873375794179a84a303968593fb40efbddab1866f1253a329fbf7ef763d5f636d83779cb03536744fd9f8245028f271a7d12d1d92f","ssdeep":"96:AVcC4lJCUZucxXCsPxQtzCX3Gm4b5DsVvs1xQ/CWcBC9nfdsDmzkqIu4u:AVcC4HCUZhCTCnL3ClBC9Mmzk1u","tlshash":"7da1ec1826332943dbb605a814fe85e0b833ac449369820157af6765b2f9cc67c3dad3","size":5024,"data":"","first_seen":"2025-08-09T08:36:15.204588Z","last_seen":"2026-03-09T10:51:40.353531Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery.min.5fbcca76f439884194ba1eaafc5d91dd.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbcca76f439884194ba1eaafc5d91dd","sha1":"474ee00912022a660f2c3dc64e659ab610c84588","sha256":"5792f1d00ee4f6148dbfb85b36a059aea4fb666e98eb76b1a5006858692374f3","sha512":"75e7882b53c4bb19eeb09c27562f8eb266a81b76893b88aa404b8f79289a2c60e93754b564bfbf75ae83a52779396aa0103128a98df86bfe49e62e1693b07e86","ssdeep":"3072:iiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6Cqax7:ihhryUA3n6em3Yjx7","tlshash":"48e3faedba45207e93f731bbb47f4b1e753a966748188081e16898b83cb4d0450abf7d","size":152373,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.275148Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/social/thirdparty/underscore.min.41cbb4dce16a64ff6047eb8b427baa57.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"41cbb4dce16a64ff6047eb8b427baa57","sha1":"218ec21fad293c5adcf7524747c29f3b6a74893e","sha256":"eed4a8c920deb13ab7fcd571dc002b76c7bd77f10eeb6e1a711fb344c4c13e72","sha512":"329008082a267ecdd79f7a5dda8279e3efc33933436fd93d6d5859f56d8c950cd964036c88dbd6fb203e8816eef3e9893242aaef8002780b9f1154c730d75c46","ssdeep":"768:d4VW/yT4PXgUIe3WNfs5rM1ryzc1sTz2iy4tVd8j/EjTujI:d4VWKwGT71sTOAssjt","tlshash":"25e281e57b92b42993d32231507f9c0bf63a9c51c4aca440c19ed8d479f1e1992afe3e","size":33578,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.241052Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b221d0ffce7e3acb0ea2e47e2fbcc63a","sha1":"76810ec90da29033e1d07e906dffb45cf2934dcc","sha256":"d04abc24691ecef946e3b33b0709eb133a2b9677f697e24b797ee3d8577021f2","sha512":"e0bf89cf2a9268c5976f56fe9d4cdd55c5553ca55d58532a1a2b6090b1a6b2172c58aa0a28e234833982796181c1bf89790f0ed112ea60545be71f3249feb825","ssdeep":"","tlshash":"1cc02b1d19f6cc34e3422c0c236f3140f0037c30ccd73602814c30b42992042921b9cf","size":141,"data":"","first_seen":"2026-03-09T00:44:51.748422Z","last_seen":"2026-03-09T10:51:40.383501Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43e43272a9930e8ed8de1dbbba88229","sha1":"25799de2faff53d82a240edd79978ea77bcd5cfe","sha256":"44b6c840027a3ce4516c05d08ed4a38ea5f87d1d14469f3e317136d38df5dc1b","sha512":"48f8b50f7b8ec5c0e41ef30848a8d22aa26af42f8148adc15fbca3736b24013653abe8a7ae33040f5bb44c50aac71ac80ad93ec27e6a578ce25d78a45af89b0c","ssdeep":"","tlshash":"8b51638a17b5047c4aeb4f2f76af7a8aa033d9da1804e083418ddcc54af2d00921bb9d","size":2520,"data":"","first_seen":"2025-10-27T20:56:08.49616Z","last_seen":"2026-05-31T09:21:33.243443Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c2197038392022a5e41ca93503c93d4","sha1":"b548afa67f2c5cae97377fcbb982a6e72dcb6560","sha256":"e09a6fe50871836dbb34d7c6e3a1d1abf38fe945d83fbf74c6f4a2201c0c4a6f","sha512":"998dd3aefb5704ee87a95ff4adc826aee640b72d2f87b9510858daeefdab16bf497b0274b46bb1dacdc05226104dd656f6f6e956c715f4097e4b11be2b022d75","ssdeep":"","tlshash":"a00149bde218769e3473314f9eebc6887b39904bb4006c11796c448f2f6d5280bc7d48","size":669,"data":"","first_seen":"2026-03-09T00:44:51.786909Z","last_seen":"2026-04-04T09:23:27.964429Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-jquery.min.bc9933f301aab450f9455035ae7c884d.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc9933f301aab450f9455035ae7c884d","sha1":"d7ba65e2de1f655619d27201159b768f13c6eda2","sha256":"bc57f2617a6fec0bb97905c5ed5ebce87508f9a803c697aa365101fb7d7255db","sha512":"38156d2daf075991ad9649f658bf08c4b24465f9ef5a741413488505de688e09227a0ec097413b975f834c94511732cf6909037ac24767d43c72ba9d2a1d5fb0","ssdeep":"3072:dFc5D45WQxvjbeelS3o654ZQkAZz3XyZ8sszUJaPixNYQh:dFMs5vZRAZznyGUJaPixNYQh","tlshash":"3ff3f8edb645207e93f731bbb07f571eb53a9a5748088081e15898b83cb8d0951abf7c","size":157821,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.193199Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibStoreLocatorT33Horaires.min.e286a79765de41f8245d22d819588cb4.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"00cdafa6732e5393b55ec4e90916c1b6","sha1":"94aff0be78d2c86eebbcb78ecb2951bd14b39032","sha256":"ffd02505676113ceb226b1922ebd755e269e464542910d4cc3bce4cbc84211f4","sha512":"f44b87277b7d10832ec953d3974d1813d68279d9993817718cf46111ec0ff1764cd524efb786d8997af08d0202162493ae9112b55fde157e8bd6fed140e56785","ssdeep":"768:QCjB3/RI9dHfl2olrSdcUCuDNLaxmuA8XXlORqF01FPuFVM9D6bGnD7M83BskQM9:jjB3u92ol2dLPutXlORqFAuby7M83Bsy","tlshash":"e513d749369025b3daf731bdf06f1a467336da9540089907693dc0e4247ea8de27bf3a","size":44970,"data":"","first_seen":"2026-02-14T17:35:23.933571Z","last_seen":"2026-04-04T09:23:27.946533Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96f2aab51d64deba1c946a0cc5ee7ff3","sha1":"b6238c42f036911198656c6c0dd6813b5388de5f","sha256":"f545be47dee03e860e8d2f188e6bab5f687c0d53d81669e0dc9ccb184fbfc64a","sha512":"811e0697edef24b9d42c24221211928070ea9169761ea8a250530f2f3be459462f154cd5520a56457a07aeea3e7830eb653c1fe3ed118ddbb161871dcfe69c70","ssdeep":"384:8WM3EsEC59MPSyGflSycGhytv8nhZPCUQ2ua1SJraBV2P+rdRINvnEE2ilvXq5U7:8zEsEC59MKyw0yBh6G+PzT22XgUW+","tlshash":"19a2f99db559563a83bf243a25af05187a37ed764e88c001e05e98e13af4e4103efe7c","size":23241,"data":"","first_seen":"2025-10-27T20:56:08.510928Z","last_seen":"2026-05-31T09:21:33.233208Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"524e19629f1c6fdfa75cd1a99d6acbbf","sha1":"126e8147cc7f40d421cda549d1f8637ceb482f2b","sha256":"3f4bb276f60906e33eaf34ea828816d36d58e930fd0ada127300171a37e61eb0","sha512":"778c4d46747390167d04c3a9cf283ea2624ec654302619436dd23d9e156d2c6756b74d9d4b4b74389b9a790d044ef2c9568294b9f89f13f34582e60c74344db3","ssdeep":"6144:GNL1Hc08cLKRUyDUdbM3gOB1icd3YuDM8IEyk/o5vdg67A:GF1T8cLKR3Ud6/B1icdoL81h/R","tlshash":"aea4289a7601213e47ff31ba906f0b0eb13a9a6644489069f478c9e83db4c4561bff7d","size":480248,"data":"","first_seen":"2025-12-10T20:04:17.971663Z","last_seen":"2026-05-31T09:21:33.21562Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general.min.17f6dfafad43c32e26c212c3f89d6d26.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a725e72ef694628b4693b3e8d41c7aaa","sha1":"1cd4e15b35a8562e703e0740e18d3139ae13f3a1","sha256":"956c2682deaa900ae3681dc497d6a65ae78a93ef9c25985d397476522883f608","sha512":"167630e7a07a4d90dd34e4d521a8f575976ed3a089154b11d0ec510e670bf62d3edb58d793edc03e6561affa12befe641caab2537712b4c7d0d64c7ec29b4c56","ssdeep":"12288:VDtgdXCow2hSzQeAwiCK8NEh9yq9fc3H66DBafDOUPSh+FBECPDuz:Eef0sq9fuH66DgfiT0BFPDG","tlshash":"6a053949b300353681ef62aa202f2a0eb23765699501c09cf579d9ee5ebcd0521bff7d","size":858900,"data":"","first_seen":"2026-03-09T00:44:51.724175Z","last_seen":"2026-03-09T10:51:40.307409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dprru9qusx2ed.cloudfront.net/8480010/brulee.js?dt=login\u0026r=0.52953984302586\u0026LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D","fqdn":"dprru9qusx2ed.cloudfront.net","domain":"dprru9qusx2ed.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b2b2ed12a1508aed5fb1fa8271f6492","sha1":"247614c1fae4b4e5ec0c9e93da471b5194c73e4b","sha256":"7b9499ec708f3656c4e0591a4f884afa14ef82b4975a2b546afad608673c8657","sha512":"ac4d69fb5b070b883a85af0edcd87b80e85e71d17de24bc09ca1fbdff955642dbe26df9dc1e572ecc1efc2762c217f31e33b3bacf279c4ba1c46fe5a326c87b9","ssdeep":"1536:4oCL4ENeRZtOtXTBYlu3B+UArAyOQ6Cf3Lp967w3WqzoywgRSpKNn+RrTdrPjBZC:4dNl12quOQrfbp96smqzo8NaNPjBRD3m","tlshash":"c97309ca33e7703903aa387066ef114bb27d6d575dc8d054e510e4d83a78aa9867bf2c","size":80125,"data":"","first_seen":"2026-03-09T00:44:51.708387Z","last_seen":"2026-03-09T00:44:51.708387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/utils.min.92dfced096519807663ae4cf894d79f2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"92dfced096519807663ae4cf894d79f2","sha1":"9d84ca7e7cb0f35df728eb8c72295106519f5d6b","sha256":"3c6288d023a7504044a7a23002ad9266f5e0d52530a9d250bab325f076889b77","sha512":"1acae7d98bfdf9f1758aa011e168abddc20698b56a50be16fbe32c53897c30ad53d80bdb40ff4bc8dd9d8a8d8e805cc0d3466c2c0867b3fbb82d998f80920a42","ssdeep":"192:h9Mmr9HdWrOG894QJGTNm96jLhOe7aWVmfIhmppb6Q8PW9BTk9A/9Tuu:h9r9Hd99Mm9AOe+9BTk9A9Tuu","tlshash":"ac42f99a71cba06743ab2270166f9b0af07b4859944ee091c1f6d9f13cf4d8e8057f7a","size":12061,"data":"","first_seen":"2024-05-24T10:15:23Z","last_seen":"2026-05-31T09:21:33.209014Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole.inbenta.com/jsonp/inbenta-1.0.0.js","fqdn":"credit-agricole.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce78c9865a7b494a3c20ae78da34412a","sha1":"0564e1b8795b98ec769cb8e3638ba4d27c0f767e","sha256":"25839dc470d9221e9566a02febe1ba5d0d48c645f5c35d4aec9a4457725217a2","sha512":"344b3cc1739ba1ef14c8445a3bdf874b200619ee8ec74cb6119ba3b6df1c6b656a156ba30bfd8d5018ddb4cb97e581478a507a0901316be1d68bb763e7fe9c3c","ssdeep":"","tlshash":"bb51ee5c28d9261c629b717a6bef71247870a003200cca01bd5deb924f60c6195ffbdd","size":2633,"data":"","first_seen":"2025-04-04T11:22:17.729972Z","last_seen":"2026-05-31T09:21:33.286648Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-common.min.bf6f533d4eb8f78d8cb0c8332f3304c2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e6841c7e724515d41eeab1aa6777061","sha1":"f1321b36efeef1d4ffb20921b2ff7ea17c344ce0","sha256":"c9fc932e5c9bc690da4f72f9dd0426649a5afaff06d1fb58f2be74b898f18d88","sha512":"956b9e2f812c085138aba996d4115b67f9af39dd6f2113075ca58ac1d3d6901c5af218c5340b97c25aa1a4f414e3f29dc6d90d7669072e9c2b7c0a3f17357177","ssdeep":"1536:XiNc9zjQd2Tll9BX2x01r9ZIHfQ/4S9E7cpND6:9NTT9BGx0RLIHKrD6","tlshash":"3153f8483462203b87df527638ff174c65328461b554c4db71aedaca2ff8e85522bb2e","size":65388,"data":"","first_seen":"2026-02-14T17:35:24.010022Z","last_seen":"2026-03-09T10:51:40.316677Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/checklist/clientlib.min.03ce14b7059f6d7cb1c201a465f04ccb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ce14b7059f6d7cb1c201a465f04ccb","sha1":"270b23493596862cdf8a875c86a940d696b87e4e","sha256":"d19a0a46a561a922196172b6efa044fe53911026198f18f5985288b8f57ae47a","sha512":"953062f4807a049e99205307bd1a0e7789255e93c27ba116cecedc0497bcae1a0fb0dcdb72daa89764d67ddbde4a62dd4fbb6ef7be7d23e93c7bad6ac19e33fd","ssdeep":"96:3I6XE3obhIST1qR63dzqCNWmhvS1UMQQbipqrobu8C0MEwhycKJuFfFXeT0EK4Bo:3I6XEY6ST10+5LWmhvS1UMQQG80y8C0g","tlshash":"2aa111a42601607dd6f72177282f2f39f437b712fa24d58816ed88a805acec5525fb2a","size":4946,"data":"","first_seen":"2025-01-02T08:50:11.27218Z","last_seen":"2026-05-31T09:21:33.246855Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole.inbenta.com/jsonp/inbenta-1.0.0.js","fqdn":"credit-agricole.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce78c9865a7b494a3c20ae78da34412a","sha1":"0564e1b8795b98ec769cb8e3638ba4d27c0f767e","sha256":"25839dc470d9221e9566a02febe1ba5d0d48c645f5c35d4aec9a4457725217a2","sha512":"344b3cc1739ba1ef14c8445a3bdf874b200619ee8ec74cb6119ba3b6df1c6b656a156ba30bfd8d5018ddb4cb97e581478a507a0901316be1d68bb763e7fe9c3c","ssdeep":"","tlshash":"bb51ee5c28d9261c629b717a6bef71247870a003200cca01bd5deb924f60c6195ffbdd","size":2633,"data":"","first_seen":"2025-04-04T11:22:17.729972Z","last_seen":"2026-05-31T09:21:33.286648Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96f2aab51d64deba1c946a0cc5ee7ff3","sha1":"b6238c42f036911198656c6c0dd6813b5388de5f","sha256":"f545be47dee03e860e8d2f188e6bab5f687c0d53d81669e0dc9ccb184fbfc64a","sha512":"811e0697edef24b9d42c24221211928070ea9169761ea8a250530f2f3be459462f154cd5520a56457a07aeea3e7830eb653c1fe3ed118ddbb161871dcfe69c70","ssdeep":"384:8WM3EsEC59MPSyGflSycGhytv8nhZPCUQ2ua1SJraBV2P+rdRINvnEE2ilvXq5U7:8zEsEC59MKyw0yBh6G+PzT22XgUW+","tlshash":"19a2f99db559563a83bf243a25af05187a37ed764e88c001e05e98e13af4e4103efe7c","size":23241,"data":"","first_seen":"2025-10-27T20:56:08.510928Z","last_seen":"2026-05-31T09:21:33.233208Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole.inbenta.com/dist/inbenta.js","fqdn":"credit-agricole.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2724c39bea558d84dbf96a1ec784801","sha1":"d40176e1200a7b5ce59f906ba899d005be421e5e","sha256":"53cddc17a3ee12859b667d7ddec0e335bb50aa06ceeca0df29705c5ee57eab72","sha512":"77167d90fa67eaf626b5cc60be606084264cb9f2a3e1181f9a85bb5da77ee6aa2a1c55e37e004efb400f3d76f61f9fe63587c84b9b66a806befc929a7a5cf8ff","ssdeep":"1536:rq0gWcKM2eN3FJH4agirkILKKT+V7Nt5H4d:MDL44d","tlshash":"f7433c46b21170254ba7a2b8507b2206f2377e28a445444cb51dd9ed3ebcf9e213bf7e","size":58730,"data":"","first_seen":"2025-12-17T22:50:20.844616Z","last_seen":"2026-05-31T09:21:33.214877Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-common.min.bf6f533d4eb8f78d8cb0c8332f3304c2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e6841c7e724515d41eeab1aa6777061","sha1":"f1321b36efeef1d4ffb20921b2ff7ea17c344ce0","sha256":"c9fc932e5c9bc690da4f72f9dd0426649a5afaff06d1fb58f2be74b898f18d88","sha512":"956b9e2f812c085138aba996d4115b67f9af39dd6f2113075ca58ac1d3d6901c5af218c5340b97c25aa1a4f414e3f29dc6d90d7669072e9c2b7c0a3f17357177","ssdeep":"1536:XiNc9zjQd2Tll9BX2x01r9ZIHfQ/4S9E7cpND6:9NTT9BGx0RLIHKrD6","tlshash":"3153f8483462203b87df527638ff174c65328461b554c4db71aedaca2ff8e85522bb2e","size":65388,"data":"","first_seen":"2026-02-14T17:35:24.010022Z","last_seen":"2026-03-09T10:51:40.316677Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfde12df8f9c3774f3d306d92ddcd68c","sha1":"e696fde4671e290239c4b4d4dfde4a3db3614db5","sha256":"4bf48e3c31b7335e64df56b63ee88bfc5dab142239f61d826c9899e507739bc5","sha512":"952bb5b4d72fde2014a4238ae26b8885769164c40ed8c530d82c5c0f3579ee54457a021f5ada6e6013620f9113260d67e403b1a416a5b3df956bc7de6bc7d22c","ssdeep":"","tlshash":"9811bdcaff9e08f1459d319f197297dcb07c61f128445891bc4c6e3426a0eae413ee91","size":1033,"data":"","first_seen":"2026-03-09T00:44:51.790781Z","last_seen":"2026-04-04T09:23:27.966035Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","fqdn":"botcli.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.139.28","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"393ccfbd8b1d966deadadff26b9d20e6","sha1":"ac166c7383c433bc73f96d17e32c1624cf2d49ee","sha256":"53b49148989b6ab2d2e5d8f58aa00ce8fcad170b17154ea36ac1dac7120bee6e","sha512":"d530df01eb9ce25f4cc80a69e50323e44be9b35913954f696b87e7bcc4849a6e80480eede8c28762435c8b512bd844806c19bded47c600929fa349930ea172db","ssdeep":"1536:CcJxlrsIALZ4S62B/jdwOCNUM2M9QIQ8C6XOtfeqaUspM7vYGavt8WqPut2qy8l8:CcJxlrsIAeR2BJ2NnSosvFyt8WqPut/m","tlshash":"4073b6501a80985c2307fd7f322af6d5e4960d9a3489cae3f1567e246c9262bf1fec74","size":76097,"data":"","first_seen":"2026-03-09T00:44:51.696131Z","last_seen":"2026-05-31T09:21:33.214072Z","times_seen":10,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-09","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general.min.17f6dfafad43c32e26c212c3f89d6d26.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd677b03d83ac681636a0e520c9494fd","sha1":"33cf17b7fdc3dcdc07c578843e6a5d2af3d68cda","sha256":"8e02deef57dbefb40adb9f078ed5f3fd9df497ff83624c7229f32f922ed0e363","sha512":"5727bf0dbc890c0d7b0e65813e43b819821b9b850c79e384c24353e7028783d5bb85fedbf9f7b444341f8aa6e6e1931e99f3fdaadb43a1830f4108a5aa0cf972","ssdeep":"","tlshash":"db11210d57191b665fb2b0dad7ab22bfa2cf1244b24a68c5f8fd802c21339c910f465d","size":1000,"data":"","first_seen":"2025-10-27T20:56:08.570926Z","last_seen":"2026-05-18T15:48:37.211614Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibDateUtils.min.dcefb5f16fe203ef0efe21d9cfbf37bc.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcefb5f16fe203ef0efe21d9cfbf37bc","sha1":"8a82032e38510c862f70ac3d7c5c1351b066ec70","sha256":"862c1a15ea72b55cff7266ef11630b4d63624f7311dd58936b2211d893bd8425","sha512":"6a24de70989bee97c9fe0e6ce252ac664a74f7e29fa736031e3915d1c565fde1f81c1fa426c1dd204d3cbdc304247d9f149cfdd9c1de6c43ef4c1165af263e5b","ssdeep":"","tlshash":"62f0e549b0f3b590c2cf01a0087b0816da17869a38fa1c71e34ee9c1387c436ce2fb29","size":456,"data":"","first_seen":"2025-06-06T13:25:36.006236Z","last_seen":"2026-05-31T09:21:33.284465Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibPageErreur.min.f434b09157730b423058e364dda8b336.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8839fe33194c9000cc55bbe746b3410c","sha1":"5cc324000fd0cadb3e1275c0529de8ef4952d5ca","sha256":"d86a02c12c388518b78b95e11603ca87ef134b05a3d0ad125426258ac65501f2","sha512":"fa5ae674bec594ee8d28877df0623e75f5ab1f05ba32b1695a9b0aa1b723bafbf4056866739af8fbd40fbfd1e43e6b25e0c60bcb004a9fb1fa30c4e5477e89e6","ssdeep":"","tlshash":"21310159b1402025277e27b62727348d3a365cf55544c0b4f0be81d57ee0f366a2fb1c","size":1781,"data":"","first_seen":"2026-03-09T00:44:51.712377Z","last_seen":"2026-03-09T10:51:40.355651Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9f46da7ac54c9f24a44fe200d0fd266","sha1":"0ada65da272539c9774bc121d6676722e8feaebb","sha256":"9373508d55e451929d508f9c60acf26f4222535bfcd008d26415974c16ce617a","sha512":"d821f4c19ce92e2b45ac5dfd8fc00071549e49c614e8a46930df1d3bf48fa1c43acbe4892782f8020d47e918fffa24a5a558ae68793d7182c49aa8a86e89d3a9","ssdeep":"","tlshash":"4511992468f3107561bf307a0b9f6041732258eb600dea60bc1dead54ff0a2646aa6c8","size":1039,"data":"","first_seen":"2026-03-09T00:44:51.750045Z","last_seen":"2026-03-09T10:51:40.388089Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e206d98a719ab1c1cc6d260f7d15865e","sha1":"e1629505b0dcd82474fea769e4bd3e462d6fee2f","sha256":"701e901ae5cec0cfd711ab0b339e8751f39fd0d014c3080958473d001fec3df7","sha512":"8fb3cefc0cad3a88287710fc315c48741a2169e45f51641eefbdb943995490c27c6df6a4cfee8bb8187014756e5c4a1b71b3f912371610e7920b1e0a523bc392","ssdeep":"","tlshash":"87c092ca00ab04076013262a3a06b404b0b10a1a20897218b54c12edaf494ac0a17f89","size":132,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-04-04T09:23:27.963103Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-24T14:52:31.880335Z","times_seen":235936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"71070eeb3317a7877f6b4b8467914c03","sha1":"8cdcfafdd8160fd99a3392000dae4466599a284e","sha256":"346af30b39420689f002010bb8e2559e769ce96c91e6f3ee60553c182cdd961d","sha512":"01c8bf44941822b5e7e3aadf9eb7ec500cfae4a6720e942bfae068fe792af773d1370fb648b9828f27c286f5f5fe29631fbbb1f1468fa89a3b8bc9f08c244032","ssdeep":"","tlshash":"83216bbe54fe10809a6b3439cf9fa0987a31c49b2c09fdd57c0edd4a1fd4660839a5e0","size":1112,"data":"","first_seen":"2026-03-09T00:44:51.795581Z","last_seen":"2026-04-04T09:23:27.966561Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d266d2244fa023fb5ab7185216dfc84a","sha1":"a1068b7cb4c3a0f7d819000879c26d9cb357faa4","sha256":"e14482291121cf901e5980ec52bf2d65c8b391eee19257bae99db50b74b4b072","sha512":"6cea5f2752bdcabb4871ef5973611bd3821e8a02df60b625a7ba966244516848cb666ff6f5a8b96b9291cf4b53639a5f080177d8f275949ece5df23b679eb9ee","ssdeep":"","tlshash":"18613481f3ac2952453721e15d3e658e337c80b15d034c7fee7061207be6f2e21569a5","size":3246,"data":"","first_seen":"2026-03-09T00:44:51.754293Z","last_seen":"2026-03-09T10:51:40.390202Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery/granite.min.f9fccbe1ad2b43c0698e504caf1a9c31.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fccbe1ad2b43c0698e504caf1a9c31","sha1":"ad069936c269a5d87f6b0f51e7e630af425bb471","sha256":"0ba744e3f4c5487082da84271df5c04788510830b5a20e7f9ac2a6ec9da7bfc1","sha512":"b7ddf2db5201826fbc3f8ec930dafcd701efc346d74d563a7fee5e35688506a2db2176525611aa7e705e54d54875bf942b785b2b6bb893adfb54534062e93ca6","ssdeep":"96:tLTd4lB3A4dCYRRl60N4wNwkGQeWHuDcOCnQDh4ECaIx9UGt:YlB3A4dz20+wEMCcOoQDhLpu","tlshash":"15c1c44b6cd0207397f361b8a5ff2a02b1326229a44c94a16458d9f83dffd879227f0d","size":5797,"data":"","first_seen":"2025-10-27T20:56:08.508784Z","last_seen":"2026-05-31T09:21:33.197526Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general.min.17f6dfafad43c32e26c212c3f89d6d26.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a725e72ef694628b4693b3e8d41c7aaa","sha1":"1cd4e15b35a8562e703e0740e18d3139ae13f3a1","sha256":"956c2682deaa900ae3681dc497d6a65ae78a93ef9c25985d397476522883f608","sha512":"167630e7a07a4d90dd34e4d521a8f575976ed3a089154b11d0ec510e670bf62d3edb58d793edc03e6561affa12befe641caab2537712b4c7d0d64c7ec29b4c56","ssdeep":"12288:VDtgdXCow2hSzQeAwiCK8NEh9yq9fc3H66DBafDOUPSh+FBECPDuz:Eef0sq9fuH66DgfiT0BFPDG","tlshash":"6a053949b300353681ef62aa202f2a0eb23765699501c09cf579d9ee5ebcd0521bff7d","size":858900,"data":"","first_seen":"2026-03-09T00:44:51.724175Z","last_seen":"2026-03-09T10:51:40.307409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3092e54883bc10d5a67a98f83949539c","sha1":"90b31754c441acc631f5d34e54548d319f463f76","sha256":"9161119800ab6f1f32516de0466c9d4643fbe9c24630044e8e4393f13e24933c","sha512":"3c10bd1d625bee879b0807e0828ad11ad4a50c8ac10c5b11d70f500a20710679b17bd182264c40eb8bf5e35d07c036a5d85e8de9af9025fc5b03e7f8e216305d","ssdeep":"96:xtRQHaUhmFUdWc+T/cZYceCNEc+cOocV8clYcAf7cE1f9EcPDOKbHtcQUGc5:xtmm9c+7cZYcDNEc+cOocV8clYcADcKa","tlshash":"4d81f3ee72d8218213bb50f8562fd55e25b3e37314884084e224dbf69db5908ca53f38","size":4128,"data":"","first_seen":"2025-06-06T13:25:36.055417Z","last_seen":"2026-05-31T09:21:33.28378Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-jquery.min.bc9933f301aab450f9455035ae7c884d.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc9933f301aab450f9455035ae7c884d","sha1":"d7ba65e2de1f655619d27201159b768f13c6eda2","sha256":"bc57f2617a6fec0bb97905c5ed5ebce87508f9a803c697aa365101fb7d7255db","sha512":"38156d2daf075991ad9649f658bf08c4b24465f9ef5a741413488505de688e09227a0ec097413b975f834c94511732cf6909037ac24767d43c72ba9d2a1d5fb0","ssdeep":"3072:dFc5D45WQxvjbeelS3o654ZQkAZz3XyZ8sszUJaPixNYQh:dFMs5vZRAZznyGUJaPixNYQh","tlshash":"3ff3f8edb645207e93f731bbb07f571eb53a9a5748088081e15898b83cb8d0951abf7c","size":157821,"data":"","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.193199Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibMireAuthentification.min.ddd95a2671d580c4e32a6c4f847bbfdc.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"054fe9e2fb20ad92d6958e524c281307","sha1":"06a0e41df3af50059148f6242fdee304cc719da0","sha256":"61f9a7a3fa33c3f7b6a88cf2ed54759aebe779ffc7c1a82c8b1c4943feef0689","sha512":"d44459d79f58e3dadbef1659ea2de1f721df5b4be785598ed429408676e048c6090b9461f8ee357cb3f39fba94152e252c2cabe62c65e579cce29406e88f1091","ssdeep":"","tlshash":"4e115c4df0454ae242a947dca42895e5a0fa1ed24462cb728e3a5b99721cf0e12338a5","size":1000,"data":"","first_seen":"2026-03-09T00:44:51.740283Z","last_seen":"2026-03-09T10:51:40.390929Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery/granite.min.f9fccbe1ad2b43c0698e504caf1a9c31.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fccbe1ad2b43c0698e504caf1a9c31","sha1":"ad069936c269a5d87f6b0f51e7e630af425bb471","sha256":"0ba744e3f4c5487082da84271df5c04788510830b5a20e7f9ac2a6ec9da7bfc1","sha512":"b7ddf2db5201826fbc3f8ec930dafcd701efc346d74d563a7fee5e35688506a2db2176525611aa7e705e54d54875bf942b785b2b6bb893adfb54534062e93ca6","ssdeep":"96:tLTd4lB3A4dCYRRl60N4wNwkGQeWHuDcOCnQDh4ECaIx9UGt:YlB3A4dz20+wEMCcOoQDhLpu","tlshash":"15c1c44b6cd0207397f361b8a5ff2a02b1326229a44c94a16458d9f83dffd879227f0d","size":5797,"data":"","first_seen":"2025-10-27T20:56:08.508784Z","last_seen":"2026-05-31T09:21:33.197526Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:00 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:52:38 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 7500\r\ncontent-type: application/javascript\r\nage: 1176462\r\nx-cache: HIT\r\nx-cache-hits: 656996\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (587)","md5":"96f2aab51d64deba1c946a0cc5ee7ff3","sha1":"b6238c42f036911198656c6c0dd6813b5388de5f","sha256":"f545be47dee03e860e8d2f188e6bab5f687c0d53d81669e0dc9ccb184fbfc64a","sha512":"811e0697edef24b9d42c24221211928070ea9169761ea8a250530f2f3be459462f154cd5520a56457a07aeea3e7830eb653c1fe3ed118ddbb161871dcfe69c70","ssdeep":"384:8WM3EsEC59MPSyGflSycGhytv8nhZPCUQ2ua1SJraBV2P+rdRINvnEE2ilvXq5U7:8zEsEC59MKyw0yBh6G+PzT22XgUW+","tlshash":"19a2f99db559563a83bf243a25af05187a37ed764e88c001e05e98e13af4e4103efe7c","first_seen":"2025-10-27T20:56:08.510928Z","last_seen":"2026-05-31T09:21:33.233208Z","times_seen":52,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/bandeau-alertes/clientlib.min.e7d754b2e0b560ec227b038facf9c4eb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/ca/npc/components/content/bandeau-alertes/clientlib.min.e7d754b2e0b560ec227b038facf9c4eb.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:30:38 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 1335\r\ncontent-type: application/javascript\r\nage: 1177017\r\nx-cache: HIT\r\nx-cache-hits: 286324\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (559)","md5":"e7d754b2e0b560ec227b038facf9c4eb","sha1":"dd85882c359b0624b657b7707117926557a4e50e","sha256":"7a491de481cb3daedd1cf9d1ab809fd8410dbe7d295d3475dfd1b15679a97d7f","sha512":"1daf79efb61a9013fc0e78873375794179a84a303968593fb40efbddab1866f1253a329fbf7ef763d5f636d83779cb03536744fd9f8245028f271a7d12d1d92f","ssdeep":"96:AVcC4lJCUZucxXCsPxQtzCX3Gm4b5DsVvs1xQ/CWcBC9nfdsDmzkqIu4u:AVcC4HCUZhCTCnL3ClBC9Mmzk1u","tlshash":"7da1ec1826332943dbb605a814fe85e0b833ac449369820157af6765b2f9cc67c3dad3","first_seen":"2025-08-09T08:36:15.204588Z","last_seen":"2026-03-09T10:51:40.353531Z","times_seen":42,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/NPC-logo_Agir_chaque_jour_CA_H_Desktop-1.svg","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/NPC-logo_Agir_chaque_jour_CA_H_Desktop-1.svg HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/asset.php\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 22541\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-580d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22541,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a6438815d53936ba84ffbef78c8bcfc","sha1":"e178faa510c663b51d88b5979bbc53c73fcaf3e1","sha256":"5c44321c0ba44a1fa665ba4c928fbebd869a3082c458bd2d20a0d07a4e5fcc24","sha512":"3f1f451e53225e4ae8bbf17928afb2c39c0b53d53efe11e43441b0f2a2daf266b79c101ff65bedbac17ce6fad1eb7cfda71024bfa70e937b8d8420d2573b7e04","ssdeep":"384:80T7cbFOm/vXADhP6xypgGcFzcGmuJZ7aDLNOe4GiTM3+:fTIEh/SFzc5EZ7cLNH4GiTM3+","tlshash":"b5a201571308e7faaee1065c9b39189179dadc8be030f1d0aa7f2417d14dcd4a4acbad","first_seen":"2023-05-09T12:54:21Z","last_seen":"2026-07-14T08:39:28.315552Z","times_seen":884,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/CA_Logo_seul-1.svg","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/CA_Logo_seul-1.svg HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/asset.php\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16248\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-3f78\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":16248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"267925c136126fd813e021bb85ef59d8","sha1":"a6bae108371ab294c00d28c01f3e415feb7ed36f","sha256":"4a3b0d2a941677f6fb37a438d20deacc3cea1d6fdc728f72cf3d7ca099cc0ca9","sha512":"b50c1d4c0f8d5f5eb73edf0652be6a236ea6f423fa98ed00687433ad0ca79f6241ebea29bde321c04508c06f197742a86fa9e93cff1843f6b5303b6231a6ea22","ssdeep":"384:8J0Wk6anSgin0suJ49kx4pytVNRYHwnI2np8yqKgpDTGbwn3sRKd:a0EOS3YJiktDAH8VnpeNp3Gbwn6Kd","tlshash":"ab722242c2a597b99dc3032e82741c9a3cd69cab7471f3bc68af1457d55ccd082ac6bb","first_seen":"2023-05-11T22:53:36Z","last_seen":"2026-07-14T08:39:28.310869Z","times_seen":817,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://securpassrenov.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:40:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9d96071b1aa00daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 804267\r\nexpires: Sat, 27 Feb 2027 00:40:20 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k%2BInVyl%2BUcBZPdsIvd6vui2ehxsFnfRi4cYeFoEZ31M3FbWVKXm8K2UlS21hpL0DUjz%2B2XoMI0zw%2BWpWfHs9CUiXwDv7%2Fyxq%2FZdpcH6xLZOXJ0b9pchyFnpo%2FWOtmhyFkhxiC4if\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-24T14:46:45.728226Z","times_seen":57894,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/ZDG-Ma_Banque-735187.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/ZDG-Ma_Banque-735187.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 32742\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-7fe6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":32742,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f818cc079cea809d1f0c6e500edf60e2","sha1":"ac86ebbae8c8ee420f73354ecf75419e726f1a64","sha256":"89f8d761b66796a3058165c9ef13d75c9856d3102e9fdfe5e3b28db1ac468352","sha512":"271e1936e7132de11b91a39be0aa6b547500f9f8b8c2076a98eeeb098856e60af1eb67cd720b28d041be4604181de3dfd3f3be92d7a7233ef6e915cc3069d815","ssdeep":"768:BnN6lHNlksXZFPsLJxrjCfzp+6MhYYj1+I2ZgNM5gocpRSIgAnA6uSdhppm:1UlkYPs/rcp+v+d2R9iupA","tlshash":"f9e2e16b29e7fb88e84929f7aa88057c37c7878f70416478486b47860f6981d50cbb5f","first_seen":"2026-03-09T00:44:51.684224Z","last_seen":"2026-03-09T10:51:40.347226Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:03 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:44:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 1517\r\ncontent-type: application/javascript\r\nage: 1176954\r\nx-cache: HIT\r\nx-cache-hits: 638586\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4128,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"3092e54883bc10d5a67a98f83949539c","sha1":"90b31754c441acc631f5d34e54548d319f463f76","sha256":"9161119800ab6f1f32516de0466c9d4643fbe9c24630044e8e4393f13e24933c","sha512":"3c10bd1d625bee879b0807e0828ad11ad4a50c8ac10c5b11d70f500a20710679b17bd182264c40eb8bf5e35d07c036a5d85e8de9af9025fc5b03e7f8e216305d","ssdeep":"96:xtRQHaUhmFUdWc+T/cZYceCNEc+cOocV8clYcAf7cE1f9EcPDOKbHtcQUGc5:xtmm9c+7cZYcDNEc+cOocV8clYcADcKa","tlshash":"4d81f3ee72d8218213bb50f8562fd55e25b3e37314884084e224dbf69db5908ca53f38","first_seen":"2025-06-06T13:25:36.055417Z","last_seen":"2026-05-31T09:21:33.28378Z","times_seen":64,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibMireAuthentification.min.ddd95a2671d580c4e32a6c4f847bbfdc.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibMireAuthentification.min.ddd95a2671d580c4e32a6c4f847bbfdc.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:11:36 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Wed, 25 Feb 2026 13:06:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 5005\r\ncontent-type: application/javascript\r\nage: 992017\r\nx-cache: HIT\r\nx-cache-hits: 556\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (640)","md5":"d29d46da8d499825b1306e0200161e89","sha1":"2452679bcc7ea6ac8b7e85977fb4bfb4d4fdf940","sha256":"71db04f55a83534372faa6e36d51f5126f0734ce10d09e96f47527cc1bf1f487","sha512":"9c5c70735312d126cd8353eaef1ff2e7e23cdb86118b68833993245d371d6a0cac99375e787e041b419dc94f83f9e76284414d1faa4016ecf6a048a580142c37","ssdeep":"384:KbPLzVuFpusipEDNr2UzBd/YVseZdJiPDBgL1OUpU4zRV2DL9My:KjLzVuFpuw52onY9JiPqpkARV2P9My","tlshash":"87b2b64cf0500ec285fa53fcb02965b5b0794ea14a92da30c63f569563acf8f4e27e97","first_seen":"2026-03-09T00:44:51.689493Z","last_seen":"2026-03-09T10:51:40.354556Z","times_seen":3,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/pictoLock.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/pictoLock.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 802\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-322\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0e763f7d6cfd5e90dc90c11f4f9bab20","sha1":"2b78f502aec647fddb4ffec3c99357e32d3590a7","sha256":"f1163ebf3d1343eebdef47b2abbe0179581bde92898a4b25daff3a515cd4678d","sha512":"5769449ea652da9988d0b567bcd882e469c68861b332cfdd794f7d50165bf4d270aed82d41edaec89c9ae8b8beb85781011754e72940585ba1f735d34f5641b7","ssdeep":"","tlshash":"ae017a2915b47cc3d466866865671d7740378d2d6376f4a1fc01844b843373b04bd7c9","first_seen":"2026-03-09T00:44:51.691468Z","last_seen":"2026-03-09T10:51:40.350472Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-Regular.woff2","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-Regular.woff2 HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id/jcr:content.ihml.whiteliste.json","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /pages/id/jcr:content.ihml.whiteliste.json HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/npcicons-crunchy/npcicons-crunchy-r2505.woff","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/npcicons-crunchy/npcicons-crunchy-r2505.woff HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/montserrat/Montserrat-Bold.otf","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/montserrat/Montserrat-Bold.otf HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-SemiBold.otf","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-SemiBold.otf HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole.inbenta.com/jsonp/inbenta-1.0.0.js","fqdn":"credit-agricole.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.inbenta.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B6:7F:CF:85:4E:5E:F6:00:32:72:E3:01:45:7C:57:43:6C:DA:2E:4E","sha256":"40:B7:B4:0C:7B:0F:AE:57:F6:2C:47:36:37:47:8F:26:6C:B9:79:5E:8F:25:9F:D0:54:07:F2:91:23:2E:99:A7"}}},"request":{"raw":"GET /jsonp/inbenta-1.0.0.js HTTP/1.1\r\nHost: credit-agricole.inbenta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2633\r\nlast-modified: Tue, 16 Dec 2025 09:46:49 GMT\r\netag: \"69412a89-a49\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors deny; script-src 'self' *.inbenta.com *.inbenta.io *.inbenta.xyz; object-src 'none';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ce78c9865a7b494a3c20ae78da34412a","sha1":"0564e1b8795b98ec769cb8e3638ba4d27c0f767e","sha256":"25839dc470d9221e9566a02febe1ba5d0d48c645f5c35d4aec9a4457725217a2","sha512":"344b3cc1739ba1ef14c8445a3bdf874b200619ee8ec74cb6119ba3b6df1c6b656a156ba30bfd8d5018ddb4cb97e581478a507a0901316be1d68bb763e7fe9c3c","ssdeep":"","tlshash":"bb51ee5c28d9261c629b717a6bef71247870a003200cca01bd5deb924f60c6195ffbdd","first_seen":"2025-04-04T11:22:17.729972Z","last_seen":"2026-05-31T09:21:33.286648Z","times_seen":65,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/montserrat/Montserrat-Bold.woff2","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/montserrat/Montserrat-Bold.woff2 HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/npcicons-crunchy/npcicons-crunchy-r2505.woff2","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/npcicons-crunchy/npcicons-crunchy-r2505.woff2 HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-SemiBold.woff","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-SemiBold.woff HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","fqdn":"botcli.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.139.28","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"botcli.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Wed, 06 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2A:56:66:9B:94:6E:B4:4A:16:6D:FD:DF:65:FD:97:C9:20:EB:44:85","sha256":"E6:8E:6A:FE:2B:AC:1F:7A:98:A4:C6:29:FA:3C:21:6A:3E:1F:68:5E:4B:A1:9A:F9:D5:E6:A3:33:4B:CE:B9:53"}}},"request":{"raw":"GET /front/npc-mbot-launcher.js HTTP/1.1\r\nHost: botcli.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Mar 2026 00:40:21 GMT\r\nContent-Type: application/javascript\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, OPTIONS, FETCH\r\nCache-Control: max-age=900, public\r\nContent-Encoding: gzip\r\nEtag: W/\"6995ebf9-12941\"\r\nExpires: Mon, 09 Mar 2026 00:55:21 GMT\r\nLast-Modified: Wed, 18 Feb 2026 16:42:33 GMT\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=300\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76097,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"393ccfbd8b1d966deadadff26b9d20e6","sha1":"ac166c7383c433bc73f96d17e32c1624cf2d49ee","sha256":"53b49148989b6ab2d2e5d8f58aa00ce8fcad170b17154ea36ac1dac7120bee6e","sha512":"d530df01eb9ce25f4cc80a69e50323e44be9b35913954f696b87e7bcc4849a6e80480eede8c28762435c8b512bd844806c19bded47c600929fa349930ea172db","ssdeep":"1536:CcJxlrsIALZ4S62B/jdwOCNUM2M9QIQ8C6XOtfeqaUspM7vYGavt8WqPut2qy8l8:CcJxlrsIAeR2BJ2NnSosvFyt8WqPut/m","tlshash":"4073b6501a80985c2307fd7f322af6d5e4960d9a3489cae3f1567e246c9262bf1fec74","first_seen":"2026-03-09T00:44:51.696131Z","last_seen":"2026-05-31T09:21:33.214072Z","times_seen":10,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":79,"dns":1,"connect":31,"send":0,"wait":57,"receive":31,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-09","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"botcli.credit-agricole.fr/front/npc-mbot-launcher.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/index.css","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/asset.php\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: W/\"69aa9b3a-2dfa9b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3013275,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17601), with CRLF line terminators","md5":"148e7eb04a38f37174e72271644d3aec","sha1":"bf94d16d3b603762f17b5106683c1855bb691513","sha256":"df22fb121cd493ab000356f4fa85136a2cadce5bbe7bbeafb427153d287fa3ca","sha512":"0e0528a0a244b513819b45300cd066b0e64316e8080a9b0235d949b89b35b12d9606a2126da6a4859f8c7689a20d20f60222012fbedeb50d5e344a2746a75866","ssdeep":"6144:33p4BIXDhdn483I1OFGkXZTD3F/NTRKidYgraHTImMmTx9rLrEC2C5ZHwQUpIcEw:33p4BI9L","tlshash":"d9259325920122a686339f662bdd2b09f7956433de0215faf5ce41480ff6bf605c1eaf","first_seen":"2026-03-09T00:44:51.698111Z","last_seen":"2026-04-04T09:23:27.950407Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T00:40:20.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:524e19629f1c6fdfa75cd1a99d6acbbf","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":42189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1062), with CRLF, CR line terminators","md5":"9d80486149dadfe5db12c1381fa0956b","sha1":"686cc41e7ceb2f4753be519778c8c67e82787a72","sha256":"1dafc34750e07101428ba9c241c69f5d82f60b1fa5a5886beada9059b5f0c29d","sha512":"4e44cc10f402d57ec75bd80d974cbacb73b673b4a096e6b74b56c0b739b2221445dc142340ac163efc84194c130ff5f6dd894fcd040d58ca8d989d75c22c5389","ssdeep":"768:dYAxGB/9wXE9if2vDLPlN1qDAtPFgyHV810ztCfblaBvPENWw:dfxGt9wizPtd/6nfZaBv2","tlshash":"a613e746b68c042b567343a2a67b6348f43ad0639503c413b9bc479b7ff0e458b97ee9","first_seen":"2026-03-09T00:44:51.700278Z","last_seen":"2026-03-09T10:51:40.332302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/npc/components/content/checklist/clientlib.min.03ce14b7059f6d7cb1c201a465f04ccb.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/ca/npc/components/content/checklist/clientlib.min.03ce14b7059f6d7cb1c201a465f04ccb.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:00:32 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:56:13 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 1616\r\ncontent-type: application/javascript\r\nage: 1176247\r\nx-cache: HIT\r\nx-cache-hits: 414148\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (530)","md5":"03ce14b7059f6d7cb1c201a465f04ccb","sha1":"270b23493596862cdf8a875c86a940d696b87e4e","sha256":"d19a0a46a561a922196172b6efa044fe53911026198f18f5985288b8f57ae47a","sha512":"953062f4807a049e99205307bd1a0e7789255e93c27ba116cecedc0497bcae1a0fb0dcdb72daa89764d67ddbde4a62dd4fbb6ef7be7d23e93c7bad6ac19e33fd","ssdeep":"96:3I6XE3obhIST1qR63dzqCNWmhvS1UMQQbipqrobu8C0MEwhycKJuFfFXeT0EK4Bo:3I6XEY6ST10+5LWmhvS1UMQQG80y8C0g","tlshash":"2aa111a42601607dd6f72177282f2f39f437b712fa24d58816ed88a805acec5525fb2a","first_seen":"2025-01-02T08:50:11.27218Z","last_seen":"2026-05-31T09:21:33.246855Z","times_seen":66,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general-enquire.min.3092e54883bc10d5a67a98f83949539c.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:04 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:03 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 1517\r\ncontent-type: application/javascript\r\nage: 1177037\r\nx-cache: HIT\r\nx-cache-hits: 674818\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4128,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"3092e54883bc10d5a67a98f83949539c","sha1":"90b31754c441acc631f5d34e54548d319f463f76","sha256":"9161119800ab6f1f32516de0466c9d4643fbe9c24630044e8e4393f13e24933c","sha512":"3c10bd1d625bee879b0807e0828ad11ad4a50c8ac10c5b11d70f500a20710679b17bd182264c40eb8bf5e35d07c036a5d85e8de9af9025fc5b03e7f8e216305d","ssdeep":"96:xtRQHaUhmFUdWc+T/cZYceCNEc+cOocV8clYcAf7cE1f9EcPDOKbHtcQUGc5:xtmm9c+7cZYcDNEc+cOocV8clYcADcKa","tlshash":"4d81f3ee72d8218213bb50f8562fd55e25b3e37314884084e224dbf69db5908ca53f38","first_seen":"2025-06-06T13:25:36.055417Z","last_seen":"2026-05-31T09:21:33.28378Z","times_seen":64,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-SemiBold.woff2","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-SemiBold.woff2 HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:03 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 10:00:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-type: application/javascript\r\nage: 1175963\r\nx-cache: HIT\r\nx-cache-hits: 681510\r\naccept-ranges: bytes\r\ncontent-length: 125873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480248,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (567)","md5":"524e19629f1c6fdfa75cd1a99d6acbbf","sha1":"126e8147cc7f40d421cda549d1f8637ceb482f2b","sha256":"3f4bb276f60906e33eaf34ea828816d36d58e930fd0ada127300171a37e61eb0","sha512":"778c4d46747390167d04c3a9cf283ea2624ec654302619436dd23d9e156d2c6756b74d9d4b4b74389b9a790d044ef2c9568294b9f89f13f34582e60c74344db3","ssdeep":"6144:GNL1Hc08cLKRUyDUdbM3gOB1icd3YuDM8IEyk/o5vdg67A:GF1T8cLKR3Ud6/B1icdoL81h/R","tlshash":"aea4289a7601213e47ff31ba906f0b0eb13a9a6644489069f478c9e83db4c4561bff7d","first_seen":"2025-12-10T20:04:17.971663Z","last_seen":"2026-05-31T09:21:33.21562Z","times_seen":23,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":219,"dns":25,"connect":41,"send":0,"wait":36,"receive":70,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T00:40:15.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: pages/asset.php\r\nset-cookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":199688,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":88,"dns":40,"connect":20,"send":0,"wait":462,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"POST /pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 156\r\nOrigin: https://securpassrenov.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":156,"data":"type=ERROR\u0026code=ERROR\u0026browserName=Non+reconnu\u0026browserVersion=Non+reconnu\u0026date=2026-03-09T00%3A40%3A21.619Z\u0026message=Aucune+whitelist+r%C3%A9cup%C3%A9r%C3%A9e"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:524e19629f1c6fdfa75cd1a99d6acbbf","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":42189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1062), with CRLF, CR line terminators","md5":"9d80486149dadfe5db12c1381fa0956b","sha1":"686cc41e7ceb2f4753be519778c8c67e82787a72","sha256":"1dafc34750e07101428ba9c241c69f5d82f60b1fa5a5886beada9059b5f0c29d","sha512":"4e44cc10f402d57ec75bd80d974cbacb73b673b4a096e6b74b56c0b739b2221445dc142340ac163efc84194c130ff5f6dd894fcd040d58ca8d989d75c22c5389","ssdeep":"768:dYAxGB/9wXE9if2vDLPlN1qDAtPFgyHV810ztCfblaBvPENWw:dfxGt9wizPtd/6nfZaBv2","tlshash":"a613e746b68c042b567343a2a67b6348f43ad0639503c413b9bc479b7ff0e458b97ee9","first_seen":"2026-03-09T00:44:51.700278Z","last_seen":"2026-03-09T10:51:40.332302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/picto-malentendants.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/picto-malentendants.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 226\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-e2\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":226,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6305bfffe1b887c6e04af922a5d17a7","sha1":"eb0d330e354854bf4e5bc26ef8cf38206a7195b3","sha256":"38fb9425d79c19ca00ac552ebab72eeff8a2a22b28d84c8b82ac8c6b74392e80","sha512":"4a448b3af9a7234642c0c500ffb84e38bbf85cadf599b6143a5c1e8715d612ce9323d7f543cfd0c7bb4c8c259084d6bd68fc549fa8c75277f223f6f9265afe8f","ssdeep":"","tlshash":"b4d09703c0b0c93f283a4c78a81102b422aa01be90e48987201a0aa45b811593f000f8","first_seen":"2026-03-09T00:44:51.70511Z","last_seen":"2026-03-09T10:51:40.306925Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibDateUtils.min.dcefb5f16fe203ef0efe21d9cfbf37bc.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibDateUtils.min.dcefb5f16fe203ef0efe21d9cfbf37bc.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:02 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:47:37 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 242\r\ncontent-type: application/javascript\r\nage: 1176759\r\nx-cache: HIT\r\nx-cache-hits: 649107\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:02 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:03 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 913\r\ncontent-type: application/javascript\r\nage: 1177037\r\nx-cache: HIT\r\nx-cache-hits: 622137\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (556)","md5":"f43e43272a9930e8ed8de1dbbba88229","sha1":"25799de2faff53d82a240edd79978ea77bcd5cfe","sha256":"44b6c840027a3ce4516c05d08ed4a38ea5f87d1d14469f3e317136d38df5dc1b","sha512":"48f8b50f7b8ec5c0e41ef30848a8d22aa26af42f8148adc15fbca3736b24013653abe8a7ae33040f5bb44c50aac71ac80ad93ec27e6a578ce25d78a45af89b0c","ssdeep":"","tlshash":"8b51638a17b5047c4aeb4f2f76af7a8aa033d9da1804e083418ddcc54af2d00921bb9d","first_seen":"2025-10-27T20:56:08.49616Z","last_seen":"2026-05-31T09:21:33.243443Z","times_seen":52,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/pictoAssist.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/pictoAssist.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1304\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-518\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"43a422056f4c426d6dfe2e9bee817db0","sha1":"125fb3eefdead6c59d8700e282d61d9d5515c571","sha256":"5d17bfe2e085f6b8c79677cec7443e19935ee3ba04e2b5f35ad528dd328f106d","sha512":"dd6dd17b332b7909431ecbaf16ae361e6c23397182f5f32fd2bc4939b8bc619357c4d175e82509cb5024910c94edac8d72e3911ee0dff66678ee0b20bcd6d048","ssdeep":"","tlshash":"6f211dcf56685d1e286563d30801e49762ee5d64c13e5253cfce90f3e6371602df5c40","first_seen":"2026-03-09T00:44:51.707143Z","last_seen":"2026-03-09T10:51:40.331386Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dprru9qusx2ed.cloudfront.net/8480010/brulee.js?dt=login\u0026r=0.52953984302586\u0026LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D","fqdn":"dprru9qusx2ed.cloudfront.net","domain":"dprru9qusx2ed.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /8480010/brulee.js?dt=login\u0026r=0.52953984302586\u0026LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D HTTP/1.1\r\nHost: dprru9qusx2ed.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/x-javascript\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nserver: haile\r\nstrict-transport-security: max-age=86400\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-id: RTQFbJqmS-vyOpaaKvcyJpODctYPe6naRv12lpiPOGbWL2y3K2ViWA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80125,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b2b2ed12a1508aed5fb1fa8271f6492","sha1":"247614c1fae4b4e5ec0c9e93da471b5194c73e4b","sha256":"7b9499ec708f3656c4e0591a4f884afa14ef82b4975a2b546afad608673c8657","sha512":"ac4d69fb5b070b883a85af0edcd87b80e85e71d17de24bc09ca1fbdff955642dbe26df9dc1e572ecc1efc2762c217f31e33b3bacf279c4ba1c46fe5a326c87b9","ssdeep":"1536:4oCL4ENeRZtOtXTBYlu3B+UArAyOQ6Cf3Lp967w3WqzoywgRSpKNn+RrTdrPjBZC:4dNl12quOQrfbp96smqzo8NaNPjBRD3m","tlshash":"c97309ca33e7703903aa387066ef114bb27d6d575dc8d054e510e4d83a78aa9867bf2c","first_seen":"2026-03-09T00:44:51.708387Z","last_seen":"2026-03-09T00:44:51.708387Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/social/thirdparty/underscore.min.41cbb4dce16a64ff6047eb8b427baa57.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/clientlibs/social/thirdparty/underscore.min.41cbb4dce16a64ff6047eb8b427baa57.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:04 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 9664\r\ncontent-type: application/javascript\r\nage: 1177013\r\nx-cache: HIT\r\nx-cache-hits: 664965\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (567)","md5":"41cbb4dce16a64ff6047eb8b427baa57","sha1":"218ec21fad293c5adcf7524747c29f3b6a74893e","sha256":"eed4a8c920deb13ab7fcd571dc002b76c7bd77f10eeb6e1a711fb344c4c13e72","sha512":"329008082a267ecdd79f7a5dda8279e3efc33933436fd93d6d5859f56d8c950cd964036c88dbd6fb203e8816eef3e9893242aaef8002780b9f1154c730d75c46","ssdeep":"768:d4VW/yT4PXgUIe3WNfs5rM1ryzc1sTz2iy4tVd8j/EjTujI:d4VWKwGT71sTOAssjt","tlshash":"25e281e57b92b42993d32231507f9c0bf63a9c51c4aca440c19ed8d479f1e1992afe3e","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.241052Z","times_seen":67,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/pictoHelp.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/pictoHelp.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1330\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-532\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"9124936a93aa15446a08c4256cf9c9d9","sha1":"94c0d9fddcb7d50dfa68012a0e5c5caf57c98b2e","sha256":"a5432868095ddc643c208a2e0577bfea6539979a37aa6f6203d1a56641b9eef9","sha512":"ff044151182d9f3b47c2777fff789602819d94dd6e5af9f4190bcb4f1de9430d9599ed442992e748e956ac2f953b686bc21a4169b07e70a547daaccf590d7ee9","ssdeep":"","tlshash":"152108a8c705032a1fb360f9175fac84722f441a10a8d51ef4e543df48ecb6e23297e8","first_seen":"2026-03-09T00:44:51.710444Z","last_seen":"2026-03-09T10:51:40.346087Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/favico.ico","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/favico.ico HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-Bold.woff","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-Bold.woff HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-Bold.woff2","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-Bold.woff2 HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:01 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:51:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 2023\r\ncontent-type: application/javascript\r\nage: 1176509\r\nx-cache: HIT\r\nx-cache-hits: 666789\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6644,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"871a57e91f70b67f0bfd285e36cf2169","sha1":"3138b71e1352620422540ee5d46da78ad6b60d2d","sha256":"fce586c653bd071b7ba76a3df0d732ddf5ada287579f824a26594573cb9c8c20","sha512":"83447f764b8b2ae846651ae75a287beb34f5348773207208972f8afa87367e4478737d43c3e780c56e07e97ad696bb9b9707c80602c1eafb19860f2129dc1a20","ssdeep":"192:W0rqPKxOxaISWktcibWZgs4rlE00nwDW8KGJGt:V4KxsvxktcibWZgs4rlE00nwDW8KGJGt","tlshash":"cdd182e572190fb71acf6577343f834cb376006dd0040b68ae699af85570d89a82afb9","first_seen":"2025-06-06T13:25:36.015348Z","last_seen":"2026-05-31T09:21:33.290298Z","times_seen":64,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibPageErreur.min.f434b09157730b423058e364dda8b336.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibPageErreur.min.f434b09157730b423058e364dda8b336.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:21:15 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Wed, 25 Feb 2026 13:09:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 907\r\ncontent-type: application/javascript\r\nvha6-origin: cats-rd15-prd\r\nage: 991839\r\nx-cache: HIT\r\nx-cache-hits: 1056\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (568)","md5":"8839fe33194c9000cc55bbe746b3410c","sha1":"5cc324000fd0cadb3e1275c0529de8ef4952d5ca","sha256":"d86a02c12c388518b78b95e11603ca87ef134b05a3d0ad125426258ac65501f2","sha512":"fa5ae674bec594ee8d28877df0623e75f5ab1f05ba32b1695a9b0aa1b723bafbf4056866739af8fbd40fbfd1e43e6b25e0c60bcb004a9fb1fa30c4e5477e89e6","ssdeep":"","tlshash":"21310159b1402025277e27b62727348d3a365cf55544c0b4f0be81d57ee0f366a2fb1c","first_seen":"2026-03-09T00:44:51.712377Z","last_seen":"2026-03-09T10:51:40.355651Z","times_seen":3,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"botcli.credit-agricole.fr/front/npc-mbot-launcher.css?v=11584723","fqdn":"botcli.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.139.28","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"botcli.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Wed, 06 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2A:56:66:9B:94:6E:B4:4A:16:6D:FD:DF:65:FD:97:C9:20:EB:44:85","sha256":"E6:8E:6A:FE:2B:AC:1F:7A:98:A4:C6:29:FA:3C:21:6A:3E:1F:68:5E:4B:A1:9A:F9:D5:E6:A3:33:4B:CE:B9:53"}}},"request":{"raw":"GET /front/npc-mbot-launcher.css?v=11584723 HTTP/1.1\r\nHost: botcli.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Mar 2026 00:40:21 GMT\r\nContent-Type: text/css\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, OPTIONS, FETCH\r\nCache-Control: max-age=2592000, public\r\nContent-Encoding: gzip\r\nEtag: W/\"6995ebf9-4cca\"\r\nExpires: Wed, 08 Apr 2026 00:40:21 GMT\r\nLast-Modified: Wed, 18 Feb 2026 16:42:33 GMT\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=299\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19658,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cdaca1a8bae1a290260e29c12dc0bdd8","sha1":"0262764b9946e9ced0ffb9c02ecb84994efbcfdb","sha256":"38477d36baa398d15261f940de06e6bddde0743cdf90e20e865f41fe1bfe32bb","sha512":"069b28502f192117b5dd242b331b2405bab20013351c2aad142ccd15ee0ad502ca7180947f8ca993584586f49d7ee2484f0aaead5f660448d8dff412402a614d","ssdeep":"192:pIIOmt9vjVsW1mMBV/4OGbJkfNFcOs9emQXq4RZM+aOwDgf12kpfwUjZzobd+aOt:n0JkfNFFWQ3Z5o+o6","tlshash":"1492a9979ad21414712bc9796bda6a3017ac80836c2bbdae72cd54dccf3d69c36f1b01","first_seen":"2026-02-09T10:48:18.84999Z","last_seen":"2026-05-18T15:48:37.138397Z","times_seen":8,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/utils.min.92dfced096519807663ae4cf894d79f2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/clientlibs/granite/utils.min.92dfced096519807663ae4cf894d79f2.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:00:35 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:44:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 4065\r\ncontent-type: application/javascript\r\nage: 1176958\r\nx-cache: HIT\r\nx-cache-hits: 415609\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12061,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"92dfced096519807663ae4cf894d79f2","sha1":"9d84ca7e7cb0f35df728eb8c72295106519f5d6b","sha256":"3c6288d023a7504044a7a23002ad9266f5e0d52530a9d250bab325f076889b77","sha512":"1acae7d98bfdf9f1758aa011e168abddc20698b56a50be16fbe32c53897c30ad53d80bdb40ff4bc8dd9d8a8d8e805cc0d3466c2c0867b3fbb82d998f80920a42","ssdeep":"192:h9Mmr9HdWrOG894QJGTNm96jLhOe7aWVmfIhmppb6Q8PW9BTk9A/9Tuu:h9r9Hd99Mm9AOe+9BTk9A9Tuu","tlshash":"ac42f99a71cba06743ab2270166f9b0af07b4859944ee091c1f6d9f13cf4d8e8057f7a","first_seen":"2024-05-24T10:15:23Z","last_seen":"2026-05-31T09:21:33.209014Z","times_seen":69,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/libs/granite/csrf/token.json","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /pages/libs/granite/csrf/token.json HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/ZAC_2_320X210_SOCIETARIAT.jpg","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/ZAC_2_320X210_SOCIETARIAT.jpg HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/asset.php\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9366\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-2496\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9366,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3cfbc7575a2acc1d1ec6d0a3cf5d255","sha1":"54a5cc8e83899501ff0cb6cfc5b2ab120ce17178","sha256":"799bc343edc20c2afb505596d8afcd94196160e89797423cb2699f3360e303b7","sha512":"ead08262a37bd88966fbd02fdfc7199e8cff60e01587299e9b8df64d90247b9190a43b6c1fc9769626ab26408336af6846c647a601604d85b42714befb62feea","ssdeep":"192:O2kNs0ezMiAo1fCBlPQPajnSUT1a0bH2SNHFvMVPYYETwQjUVZe7d:O2ku0eznBQBQyjnR1fbWSNxMFYHTwYui","tlshash":"b512c08fbef940c90b3e1d341c9154d2235b85e5d8e111f38ea3cd87d9606f6a68be91","first_seen":"2025-04-04T11:22:17.623191Z","last_seen":"2026-04-04T09:23:27.943103Z","times_seen":25,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/index2.css","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/index2.css HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: W/\"69aa9b3a-28a062\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2662498,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17601), with CRLF line terminators","md5":"c301c29bd4b5ff1bd97710f69d0996b5","sha1":"3f5fc28be9edf56d74d3cf88f1db090419bf171f","sha256":"f173e40c9393160e309787d5b7d23633e74961546a7a27bcfee9ff6e5315277e","sha512":"81becba2dd062d14b201753654dff721ad1c3289eaa6830bd3aede125873cad9777fea78b1a6d979b8e75980b47fd253e62e18e0f332b4801f2feb53137b0fb5","ssdeep":"6144:3JuxBIXDhdnZ83I1OFGkXZTD3F/NTRKidYgraHTImMmTx9rLrEC2C5ZHwQUpIcEU:3JuxBI9E","tlshash":"a725a425920122a686339f662bdd2b09f7956433de0215faf5ce41480ff6bf605c1eaf","first_seen":"2026-03-09T00:44:51.717456Z","last_seen":"2026-03-09T10:51:40.356626Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/fonts/npcicons-crunchy-r2505.woff2","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/fonts/npcicons-crunchy-r2505.woff2 HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJpIjoiemFQd2w5dDByUjkrbXVnVlplendvQT09IiwiZSI6IkV4TlAydXpjMXc2R3ZYWEhKNlVyQmw3OFZJOTFcLzlcL296Sm1IVis5S2J6UXpRVmFNRnZuY1ZrM0RGbDc5Um5CVWVLa0JcL3dreDA2b2dURWFIY1M1NHdUc0ltZWxkbFVLRTF5ZmpKeExYOHlsYUYwWGJqWjl0V1BzY0pnOGcxUzhwbHl3U1pvTEV5dWVlbG96OXlXblNTUT09In0%3D.b5a075f658c47df0.NDAzYzlmMGUwOTRiYTg3MTM0MjQ3ZjMzY2VkMDViMGIzZDZjMzgxZGMxZGI1ZDkwM2U0YjUzMGJhYTliN2FhZQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63692\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-f8cc\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":63692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63692, version 1.0","md5":"d96781be5d3c36aadab222eda264b268","sha1":"babfa63b1f72c059fe5f064e753345cb66a1106a","sha256":"09521bd2cc28fd9dfa6245c48e046184dadb11a80e9552a05a7f04113864dc73","sha512":"fb4bbbfacf267a8b30b2c0a275a924784ab2af991af675315d22419bcc9b7d8221ba5b821946fe7e0d648b0f7050bfc8c23391b08717b719fb15e56718fca372","ssdeep":"1536:tomvhmO5CX3Ueq9ZlKhrU7gZ79rIPJxj4ru6x5OjwT:tzA3Ueqd69sPJxj4rvx5dT","tlshash":"c253f1303614d1ae8471a7d2ba1b67ce7444a468b48b4fd1f503ffd3361b60f678a98a","first_seen":"2025-12-10T20:04:17.975773Z","last_seen":"2026-04-04T09:23:27.944681Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/asset.php","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T00:40:16.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /pages/asset.php HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Bootstrap:524e19629f1c6fdfa75cd1a99d6acbbf","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}],"data":{"size":199688,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1062), with CRLF line terminators","md5":"dd4c674b1037470adc0c991af05a9041","sha1":"e1eb0a48f3362ecd714e4cedc4e0cd88ae9ff4d3","sha256":"05f86810c4258a58dad3573312a86a43d44b72194dc3c9adb30b38ef26111bf5","sha512":"91412664f5d5abc9ceaf487290df8b5208677bd1ca931397243bd7f475b8e2e867003637c3de830ef63750cbded46e7eab4eabeae23dcb1c84450a9451119d2e","ssdeep":"1536:JzOGI9wule1uomv1zN95LHlkNwfbSkbCP3MomC4LcUpZ6jjOlf1qFU0C6tV4c:gNrzMpFD","tlshash":"8114f94535d91d3b163752a3a77ae310fd69e82bd0484041bded26eb1ff0c243aafa19","first_seen":"2026-03-09T00:44:51.719885Z","last_seen":"2026-04-04T09:23:27.941236Z","times_seen":5,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-compagnon.inbenta.com/jsonp/inbenta.js","fqdn":"credit-agricole-compagnon.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"52.18.39.149","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.inbenta.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B6:7F:CF:85:4E:5E:F6:00:32:72:E3:01:45:7C:57:43:6C:DA:2E:4E","sha256":"40:B7:B4:0C:7B:0F:AE:57:F6:2C:47:36:37:47:8F:26:6C:B9:79:5E:8F:25:9F:D0:54:07:F2:91:23:2E:99:A7"}}},"request":{"raw":"GET /jsonp/inbenta.js HTTP/1.1\r\nHost: credit-agricole-compagnon.inbenta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nlast-modified: Tue, 17 Feb 2026 08:55:53 GMT\r\netag: \"69942d19-0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors deny; script-src 'unsafe-eval' 'self' www.credit-agricole.fr *.inbenta.services *.inbenta.com *.inbenta.io *.inbenta.xyz; object-src 'none';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"credit-agricole-compagnon.inbenta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"credit-agricole-compagnon.inbenta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"POST /pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 177\r\nOrigin: https://securpassrenov.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":177,"data":"type=ERROR\u0026code=ERROR\u0026browserName=Non+reconnu\u0026browserVersion=Non+reconnu\u0026date=2026-03-09T00%3A40%3A21.618Z\u0026message=Erreur+de+r%C3%A9cup%C3%A9ration+de+la+whitelist+%3A+Not+Found"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:524e19629f1c6fdfa75cd1a99d6acbbf","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":42189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1062), with CRLF, CR line terminators","md5":"9d80486149dadfe5db12c1381fa0956b","sha1":"686cc41e7ceb2f4753be519778c8c67e82787a72","sha256":"1dafc34750e07101428ba9c241c69f5d82f60b1fa5a5886beada9059b5f0c29d","sha512":"4e44cc10f402d57ec75bd80d974cbacb73b673b4a096e6b74b56c0b739b2221445dc142340ac163efc84194c130ff5f6dd894fcd040d58ca8d989d75c22c5389","ssdeep":"768:dYAxGB/9wXE9if2vDLPlN1qDAtPFgyHV810ztCfblaBvPENWw:dfxGt9wizPtd/6nfZaBv2","tlshash":"a613e746b68c042b567343a2a67b6348f43ad0639503c413b9bc479b7ff0e458b97ee9","first_seen":"2026-03-09T00:44:51.700278Z","last_seen":"2026-03-09T10:51:40.332302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-common.min.bf6f533d4eb8f78d8cb0c8332f3304c2.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-common.min.bf6f533d4eb8f78d8cb0c8332f3304c2.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:21:55 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Wed, 25 Feb 2026 13:08:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 16680\r\ncontent-type: application/javascript\r\nvha6-origin: cats-rd13-prd\r\nage: 991897\r\nx-cache: HIT\r\nx-cache-hits: 696\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65388,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1853)","md5":"8e6841c7e724515d41eeab1aa6777061","sha1":"f1321b36efeef1d4ffb20921b2ff7ea17c344ce0","sha256":"c9fc932e5c9bc690da4f72f9dd0426649a5afaff06d1fb58f2be74b898f18d88","sha512":"956b9e2f812c085138aba996d4115b67f9af39dd6f2113075ca58ac1d3d6901c5af218c5340b97c25aa1a4f414e3f29dc6d90d7669072e9c2b7c0a3f17357177","ssdeep":"1536:XiNc9zjQd2Tll9BX2x01r9ZIHfQ/4S9E7cpND6:9NTT9BGx0RLIHKrD6","tlshash":"3153f8483462203b87df527638ff174c65328461b554c4db71aedaca2ff8e85522bb2e","first_seen":"2026-02-14T17:35:24.010022Z","last_seen":"2026-03-09T10:51:40.316677Z","times_seen":4,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/montserrat/Montserrat-Bold.woff","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/montserrat/Montserrat-Bold.woff HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-Regular.otf","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-Regular.otf HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/PicCCCG.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/PicCCCG.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1370\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-55a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1370,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7fc6d3e8c2757864bff8598654f4c1d5","sha1":"7f5131f276420966d3f0716b3740cc35703931c1","sha256":"69dd5b4095c992505f768c3ffe42b449ed0ad56689cd9b80619ba78f0efa393f","sha512":"604cb47069398da383dcd734791916d11b342d4ebd785a847429f181bbdd5cbecc2ae4905f540e43cbbe820c06ea991b7851600403a84bb7558d495da5404a5e","ssdeep":"","tlshash":"d321d6387d584a24dd7a26b400da50a4db6b34fabe42ec03eb9ca90230b31e47137b90","first_seen":"2026-03-09T00:44:51.722524Z","last_seen":"2026-03-09T10:51:40.333772Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general.min.17f6dfafad43c32e26c212c3f89d6d26.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-general.min.17f6dfafad43c32e26c212c3f89d6d26.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:34:44 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Wed, 04 Mar 2026 11:34:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-type: application/javascript\r\nage: 392736\r\nx-cache: HIT\r\nx-cache-hits: 988\r\naccept-ranges: bytes\r\ncontent-length: 214854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":858900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1003)","md5":"a725e72ef694628b4693b3e8d41c7aaa","sha1":"1cd4e15b35a8562e703e0740e18d3139ae13f3a1","sha256":"956c2682deaa900ae3681dc497d6a65ae78a93ef9c25985d397476522883f608","sha512":"167630e7a07a4d90dd34e4d521a8f575976ed3a089154b11d0ec510e670bf62d3edb58d793edc03e6561affa12befe641caab2537712b4c7d0d64c7ec29b4c56","ssdeep":"12288:VDtgdXCow2hSzQeAwiCK8NEh9yq9fc3H66DBafDOUPSh+FBECPDuz:Eef0sq9fuH66DgfiT0BFPDG","tlshash":"6a053949b300353681ef62aa202f2a0eb23765699501c09cf579d9ee5ebcd0521bff7d","first_seen":"2026-03-09T00:44:51.724175Z","last_seen":"2026-03-09T10:51:40.307409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery.min.5fbcca76f439884194ba1eaafc5d91dd.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/clientlibs/granite/jquery.min.5fbcca76f439884194ba1eaafc5d91dd.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:01 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 43703\r\ncontent-type: application/javascript\r\nage: 1177017\r\nx-cache: HIT\r\nx-cache-hits: 704225\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152373,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (585)","md5":"5fbcca76f439884194ba1eaafc5d91dd","sha1":"474ee00912022a660f2c3dc64e659ab610c84588","sha256":"5792f1d00ee4f6148dbfb85b36a059aea4fb666e98eb76b1a5006858692374f3","sha512":"75e7882b53c4bb19eeb09c27562f8eb266a81b76893b88aa404b8f79289a2c60e93754b564bfbf75ae83a52779396aa0103128a98df86bfe49e62e1693b07e86","ssdeep":"3072:iiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6Cqax7:ihhryUA3n6em3Yjx7","tlshash":"48e3faedba45207e93f731bbb47f4b1e753a966748188081e16898b83cb4d0450abf7d","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.275148Z","times_seen":69,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-Bold.otf","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-Bold.otf HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://securpassrenov.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:40:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9d9607008f68a0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 804263\r\nexpires: Sat, 27 Feb 2027 00:40:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xt5EgyXVUDZQTXIDKHoJOMTyfAKH7QeuftP1R4fY7ee14uclbxlbVSwwl%2F1stYDzq2suESxgb5BWvX9S5cQc2%2FFaK4qJWTZmlU5KRLDorj7iFjhl0xkSIfE4DhghirR8clHI6CCL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-24T14:46:45.728226Z","times_seen":57894,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":21,"connect":2,"send":0,"wait":12,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/opensans/OpenSans-Regular.woff","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/opensans/OpenSans-Regular.woff HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/clientlibs/granite/jquery/granite.min.f9fccbe1ad2b43c0698e504caf1a9c31.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/clientlibs/granite/jquery/granite.min.f9fccbe1ad2b43c0698e504caf1a9c31.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:05 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:54:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 2099\r\ncontent-type: application/javascript\r\nage: 1176327\r\nx-cache: HIT\r\nx-cache-hits: 688132\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5797,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"f9fccbe1ad2b43c0698e504caf1a9c31","sha1":"ad069936c269a5d87f6b0f51e7e630af425bb471","sha256":"0ba744e3f4c5487082da84271df5c04788510830b5a20e7f9ac2a6ec9da7bfc1","sha512":"b7ddf2db5201826fbc3f8ec930dafcd701efc346d74d563a7fee5e35688506a2db2176525611aa7e705e54d54875bf942b785b2b6bb893adfb54534062e93ca6","ssdeep":"96:tLTd4lB3A4dCYRRl60N4wNwkGQeWHuDcOCnQDh4ECaIx9UGt:YlB3A4dz20+wEMCcOoQDhLpu","tlshash":"15c1c44b6cd0207397f361b8a5ff2a02b1326229a44c94a16458d9f83dffd879227f0d","first_seen":"2025-10-27T20:56:08.508784Z","last_seen":"2026-05-31T09:21:33.197526Z","times_seen":52,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-jquery.min.bc9933f301aab450f9455035ae7c884d.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-jquery.min.bc9933f301aab450f9455035ae7c884d.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:01 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:44:22 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 44736\r\ncontent-type: application/javascript\r\nage: 1176958\r\nx-cache: HIT\r\nx-cache-hits: 702277\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":157821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"bc9933f301aab450f9455035ae7c884d","sha1":"d7ba65e2de1f655619d27201159b768f13c6eda2","sha256":"bc57f2617a6fec0bb97905c5ed5ebce87508f9a803c697aa365101fb7d7255db","sha512":"38156d2daf075991ad9649f658bf08c4b24465f9ef5a741413488505de688e09227a0ec097413b975f834c94511732cf6909037ac24767d43c72ba9d2a1d5fb0","ssdeep":"3072:dFc5D45WQxvjbeelS3o654ZQkAZz3XyZ8sszUJaPixNYQh:dFMs5vZRAZznyGUJaPixNYQh","tlshash":"3ff3f8edb645207e93f731bbb07f571eb53a9a5748088081e15898b83cb8d0951abf7c","first_seen":"2024-05-24T10:15:22Z","last_seen":"2026-05-31T09:21:33.193199Z","times_seen":69,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/icone_ca_pwa.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/icone_ca_pwa.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/ca/commun/components/clientlibMessages.min.f43e43272a9930e8ed8de1dbbba88229.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:30:37 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:53:37 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 913\r\ncontent-type: application/javascript\r\nage: 1176399\r\nx-cache: HIT\r\nx-cache-hits: 371433\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (556)","md5":"f43e43272a9930e8ed8de1dbbba88229","sha1":"25799de2faff53d82a240edd79978ea77bcd5cfe","sha256":"44b6c840027a3ce4516c05d08ed4a38ea5f87d1d14469f3e317136d38df5dc1b","sha512":"48f8b50f7b8ec5c0e41ef30848a8d22aa26af42f8148adc15fbca3736b24013653abe8a7ae33040f5bb44c50aac71ac80ad93ec27e6a578ce25d78a45af89b0c","ssdeep":"","tlshash":"8b51638a17b5047c4aeb4f2f76af7a8aa033d9da1804e083418ddcc54af2d00921bb9d","first_seen":"2025-10-27T20:56:08.49616Z","last_seen":"2026-05-31T09:21:33.243443Z","times_seen":52,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibHeader.min.96f2aab51d64deba1c946a0cc5ee7ff3.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:03 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 7500\r\ncontent-type: application/javascript\r\nage: 1177013\r\nx-cache: HIT\r\nx-cache-hits: 656193\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (587)","md5":"96f2aab51d64deba1c946a0cc5ee7ff3","sha1":"b6238c42f036911198656c6c0dd6813b5388de5f","sha256":"f545be47dee03e860e8d2f188e6bab5f687c0d53d81669e0dc9ccb184fbfc64a","sha512":"811e0697edef24b9d42c24221211928070ea9169761ea8a250530f2f3be459462f154cd5520a56457a07aeea3e7830eb653c1fe3ed118ddbb161871dcfe69c70","ssdeep":"384:8WM3EsEC59MPSyGflSycGhytv8nhZPCUQ2ua1SJraBV2P+rdRINvnEE2ilvXq5U7:8zEsEC59MKyw0yBh6G+PzT22XgUW+","tlshash":"19a2f99db559563a83bf243a25af05187a37ed764e88c001e05e98e13af4e4103efe7c","first_seen":"2025-10-27T20:56:08.510928Z","last_seen":"2026-05-31T09:21:33.233208Z","times_seen":52,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/asset.php","date":"2026-03-09T00:40:16.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlibModal.min.871a57e91f70b67f0bfd285e36cf2169.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:05 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:43:03 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-length: 2023\r\ncontent-type: application/javascript\r\nage: 1177032\r\nx-cache: HIT\r\nx-cache-hits: 659100\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6644,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"871a57e91f70b67f0bfd285e36cf2169","sha1":"3138b71e1352620422540ee5d46da78ad6b60d2d","sha256":"fce586c653bd071b7ba76a3df0d732ddf5ada287579f824a26594573cb9c8c20","sha512":"83447f764b8b2ae846651ae75a287beb34f5348773207208972f8afa87367e4478737d43c3e780c56e07e97ad696bb9b9707c80602c1eafb19860f2129dc1a20","ssdeep":"192:W0rqPKxOxaISWktcibWZgs4rlE00nwDW8KGJGt:V4KxsvxktcibWZgs4rlE00nwDW8KGJGt","tlshash":"cdd182e572190fb71acf6577343f834cb376006dd0040b68ae699af85570d89a82afb9","first_seen":"2025-06-06T13:25:36.015348Z","last_seen":"2026-05-31T09:21:33.290298Z","times_seen":64,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d27bwt4nw7kfh0.cloudfront.net/8480010/jeba.js?r=0.8807718432144215","fqdn":"d27bwt4nw7kfh0.cloudfront.net","domain":"d27bwt4nw7kfh0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /8480010/jeba.js?r=0.8807718432144215 HTTP/1.1\r\nHost: d27bwt4nw7kfh0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/x-javascript\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nserver: haile\r\nstrict-transport-security: max-age=86400\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nx-amz-cf-id: Qfy5RxMl-Cm5fVQiPzBFvgevuzN-RqyoCCcVNTkB4U9Wzeg1VZyJLQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole.inbenta.com/dist/inbenta.js","fqdn":"credit-agricole.inbenta.com","domain":"inbenta.com","tld":"com"},"ip":{"addr":"54.228.89.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.inbenta.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B6:7F:CF:85:4E:5E:F6:00:32:72:E3:01:45:7C:57:43:6C:DA:2E:4E","sha256":"40:B7:B4:0C:7B:0F:AE:57:F6:2C:47:36:37:47:8F:26:6C:B9:79:5E:8F:25:9F:D0:54:07:F2:91:23:2E:99:A7"}}},"request":{"raw":"GET /dist/inbenta.js HTTP/1.1\r\nHost: credit-agricole.inbenta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58730\r\nlast-modified: Tue, 16 Dec 2025 09:46:59 GMT\r\netag: \"69412a93-e56a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors deny; script-src 'self' *.inbenta.com *.inbenta.io *.inbenta.xyz; object-src 'none';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58730,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58728), with no line terminators","md5":"f2724c39bea558d84dbf96a1ec784801","sha1":"d40176e1200a7b5ce59f906ba899d005be421e5e","sha256":"53cddc17a3ee12859b667d7ddec0e335bb50aa06ceeca0df29705c5ee57eab72","sha512":"77167d90fa67eaf626b5cc60be606084264cb9f2a3e1181f9a85bb5da77ee6aa2a1c55e37e004efb400f3d76f61f9fe63587c84b9b66a806befc929a7a5cf8ff","ssdeep":"1536:rq0gWcKM2eN3FJH4agirkILKKT+V7Nt5H4d:MDL44d","tlshash":"f7433c46b21170254ba7a2b8507b2206f2377e28a445444cb51dd9ed3ebcf9e213bf7e","first_seen":"2025-12-17T22:50:20.844616Z","last_seen":"2026-05-31T09:21:33.214877Z","times_seen":22,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.credit-agricole.fr/etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js","fqdn":"www.credit-agricole.fr","domain":"credit-agricole.fr","tld":"fr"},"ip":{"addr":"158.191.172.47","port":443,"asn":9159,"as":"Credit Agricole SA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:20.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.credit-agricole.fr","organization":"Credit Agricole SA"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:72:27:B3:2F:14:48:01:C1:2A:14:1A:79:F0:3C:CD:3D:CC:F8:6F","sha256":"BD:27:F8:01:02:29:B6:40:AF:6D:7F:CB:21:5E:FD:C6:01:4C:03:44:DC:8D:9A:6B:AC:C1:8F:7D:27:4D:EC:DA"}}},"request":{"raw":"GET /etc.clientlibs/settings/wcm/designs/ca/npc/clientlib-bootstrap-jquery.min.524e19629f1c6fdfa75cd1a99d6acbbf.js HTTP/1.1\r\nHost: www.credit-agricole.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 11:20:04 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: sync-xhr=('https://*.credit-agricole.fr')\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-embedder-policy: unsafe-none\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 23 Feb 2026 09:48:56 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://*.group.gca https://*.credit-agricole.fr https://*.banque-chalus.fr\r\ncontent-type: application/javascript\r\nage: 1176684\r\nx-cache: HIT\r\nx-cache-hits: 726049\r\naccept-ranges: bytes\r\ncontent-length: 125873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480248,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (567)","md5":"524e19629f1c6fdfa75cd1a99d6acbbf","sha1":"126e8147cc7f40d421cda549d1f8637ceb482f2b","sha256":"3f4bb276f60906e33eaf34ea828816d36d58e930fd0ada127300171a37e61eb0","sha512":"778c4d46747390167d04c3a9cf283ea2624ec654302619436dd23d9e156d2c6756b74d9d4b4b74389b9a790d044ef2c9568294b9f89f13f34582e60c74344db3","ssdeep":"6144:GNL1Hc08cLKRUyDUdbM3gOB1icd3YuDM8IEyk/o5vdg67A:GF1T8cLKR3Ud6/B1icdoL81h/R","tlshash":"aea4289a7601213e47ff31ba906f0b0eb13a9a6644489069f478c9e83db4c4561bff7d","first_seen":"2025-12-10T20:04:17.971663Z","last_seen":"2026-05-31T09:21:33.21562Z","times_seen":23,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/images/logoCA-NoText.png","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /images/logoCA-NoText.png HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJlIjoiajVOcHF6djJURXhmKzlMajBLckhYaUlSRm5sQXBjYkExRWpOSDhzanJGa1kxcGI3K0xSN1dQVTBRRUpucEFJZmNyc0dZUXphSVNpQURoUlhlb1RTdkFBZFlHeEpHdXVZUE1ZeklTOHhYaDV0Qkp2YlFIMFpGdW10R1ZPYldxWnd4ZDZcL1NLRlczTVFFRmNhcldJVklcL0E9PSIsImkiOiJ1RUh5Qnk0d0pFVEJ5WllMcVVwQU53PT0ifQ%3D%3D.e325be7f16f31de2.OTY1OGQ3M2FhYTRhNjE0NjNmYjM0M2U1Y2QyZDdmNWU1MTk4NjgyMDEwNDU3YjAxMjU4NTFjZDRhYTQ1ZWE4YQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 716\r\nlast-modified: Fri, 06 Mar 2026 09:15:38 GMT\r\netag: \"69aa9b3a-2cc\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":716,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 60x60, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6932d784bd1f1f5aae35dcf376d1f1a5","sha1":"909ac914e4b3ec4d151d97a9d35374b3d6751f34","sha256":"0489c755076aff029e90d78ce09f49f377e4150112b9f2e1c191e5d6cade1100","sha512":"5d810c785d976be99c1b7b15739ee51ca253606c34bc687fd44a9de7c9b5ef967be0fd11fb8c60c31002b5a9f6216e2a16edfe1b5e781592f406f43fa4f800c2","ssdeep":"","tlshash":"980160b68eed39ee8ea0014c800269ca003e120222903a1807b4ce1bd31f760be82ce6","first_seen":"2025-11-28T00:21:42.176773Z","last_seen":"2026-03-09T10:51:40.330572Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securpassrenov.com/css/clientlib-resources/resources/fonts/npcicons-crunchy/npcicons-crunchy-r2505.ttf","fqdn":"securpassrenov.com","domain":"securpassrenov.com","tld":"com"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securpassrenov.com/pages/id.php?CCPTE=\u0026j_password=\u0026j_username=\u0026j_currentpath=%2Fcontent%2Fnpc%2Fstart\u0026j_validate=true","date":"2026-03-09T00:40:21.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securpassrenov.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:25:03 GMT","end":"Thu, 04 Jun 2026 14:25:02 GMT"},"fingerprint":{"sha1":"3A:A7:42:9B:53:F2:8A:80:5E:BF:6F:C4:19:61:D4:C6:A9:8D:BB:39","sha256":"E5:CE:79:82:5F:70:31:2A:DA:4E:AC:50:73:D8:2D:7A:FF:AE:58:CB:29:57:CC:45:E8:35:F7:E2:B4:9C:ED:BC"}}},"request":{"raw":"GET /css/clientlib-resources/resources/fonts/npcicons-crunchy/npcicons-crunchy-r2505.ttf HTTP/1.1\r\nHost: securpassrenov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securpassrenov.com/css/index2.css\r\nCookie: PHPSESSID=j3vdpsq4h1h160rb4ksetp00dg; LSESSION_8480010=eyJpIjoiemFQd2w5dDByUjkrbXVnVlplendvQT09IiwiZSI6IkV4TlAydXpjMXc2R3ZYWEhKNlVyQmw3OFZJOTFcLzlcL296Sm1IVis5S2J6UXpRVmFNRnZuY1ZrM0RGbDc5Um5CVWVLa0JcL3dreDA2b2dURWFIY1M1NHdUc0ltZWxkbFVLRTF5ZmpKeExYOHlsYUYwWGJqWjl0V1BzY0pnOGcxUzhwbHl3U1pvTEV5dWVlbG96OXlXblNTUT09In0%3D.b5a075f658c47df0.NDAzYzlmMGUwOTRiYTg3MTM0MjQ3ZjMzY2VkMDViMGIzZDZjMzgxZGMxZGI1ZDkwM2U0YjUzMGJhYTliN2FhZQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 09 Mar 2026 00:40:21 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T14:48:17.046184Z","times_seen":543429,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-09","alert":"Phishing Block","trigger":"securpassrenov.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"securpassrenov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}