{"report_id":"6f1f9965-725e-4be0-bcea-b815252d55ff","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-08-04T14:22:55Z","url":{"schema":"http","addr":"credit-agricole-filtre-exagone.iceiy.com/","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/pages/index.php","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"title":"Accès à votre caisse régionale - Crédit Agricole","dom":{"size":220101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1462)","md5":"a7f79a7f11fe4d1505853e5811bbc8a7","sha1":"858ee9709e24d8fd99c25bc74246cfcfe491c4c1","sha256":"f384ade81dd6da65d2a857d9340fcbb615ab6e1bdd5ab316e75715cac90bd25f","sha512":"54e03c72ea2bfa9561e9bc698939ef50794e9751720e4584cfd96ec381fee3500a8e7ab8e9b667c9cb9aa48c5c09b6c91924f6d93ed2b9c73d26fb2cb7fdb480","ssdeep":"1536:3a+aLa2bypSwvStRsU5vXQyj1ICuTO/Iz1qmGvH7xheRn+pk90Ocz1vl6a4fC5vo:4KcApdX","tlshash":"cd24623690e40536522bb6d2b1a49b136ee7d31fc98d8690afa846d46ff1d312d9f30c","dom_hash":"domhash40ed46c774fd6294a1885b8ecb1a219b","first_seen":"2026-06-24T18:57:23.546277Z","last_seen":"2026-08-04T14:22:57.736849Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"credit-agricole-filtre-exagone.iceiy.com/","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T14:22:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects file containing Telegram Bot API","trigger":"credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"credit-agricole-filtre-exagone.iceiy.com","ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2020-12-06","domain_rank":0,"first_seen":"2026-08-04T14:18:11.624885Z","last_seen":"2026-08-04T14:18:11.624885Z","alert_count":190,"request_count":47,"received_data":3258246,"sent_data":25325,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]}]},{"fqdn":"aeonfree.com","ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-06-03","domain_rank":1525157,"first_seen":"2019-06-07T14:13:59Z","last_seen":"2026-08-04T07:05:19.793939Z","alert_count":0,"request_count":27,"received_data":17780,"sent_data":13588,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"md5":"f35e558855ee557632486e4822124bfc","sha1":"d2d1ba9e0824736f2eb17402faf4eed98fd4b92e","sha256":"50263bb360baf36ca59ae603cc8a618cf71ce0941cb69d2b351ebf0a29531dd3","sha512":"244c0e589c81900f1b94f91ef71c94d5cea9ad2006f43abf8597db1efb025648b0033b11ee97a206ff4571b350545b36b520cd3cb04d762774b7b3efbd524bd1","size":15575,"token":"8761552731:AAG56TaZjuk8bzewloRTx4kxkvn-kxCee3I","is_revoked":false,"bot":{"token":"8761552731:AAG56TaZjuk8bzewloRTx4kxkvn-kxCee3I","user_id":"8761552731","username":"NextGenVision90_bot","first_name":"AGRÉGATION","last_name":"","chat":{"chat_id":"","title":"","type":"","bot_is":"","total_users":0,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/pages/index.php","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d468324bd186227666da6398dd99bf9","sha1":"6351a076f6870d8205bb805421f418476b7095ec","sha256":"7155d0437699036a3ed5062e3036b873ec16e9245e607757a3ccb4a7194904bb","sha512":"4caaebf1fd5cf940c0939327c2f0ed4563e9e006326f9a7213e0bcd3f5e24bb63e96431535a248db4ccac3cb659433d99337d2e26ff45d2a6f3fc304b15a97bf","ssdeep":"","tlshash":"1fc02b0c20ac1638847f14bb646383ce75300048ea09c8b21c19e73b3c90bf5ade98e4","size":156,"data":"","first_seen":"2026-06-24T18:57:23.596276Z","last_seen":"2026-08-04T14:22:57.76235Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/pages/index.php","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3a686461164a389e725e407d6fc5b4e","sha1":"36c7725051813e204034dcee09c5cd56e816b981","sha256":"1488d6379ba2954302b4bcebb387e25b7e7fd312b8ab2dbade536b15d1bc04e1","sha512":"e137bab53d82bdfc71ab7db45c9f74d0231f025547012e01fd735661c273e371cbc9c1cb45e30386c2b0b8c26fa188b143143f9e6eadf10f71afebb199bbf1d6","ssdeep":"96:8y1W5mMMgyTSsi/yocpdrD5VY/YLBM9x8F/UCLJxQgsCXUzw0jW+2+TY:8yQ4MMgqB/zLaWNB","tlshash":"66328e5792700436e3eb703367e48d0ba2f75de9c888d5192351c2e5232b737e3e6aa5","size":10982,"data":"","first_seen":"2026-06-24T18:57:23.597488Z","last_seen":"2026-08-04T14:22:57.763579Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/pages/index.php","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9aaaaa31ef0056462d60a9ad98901c19","sha1":"4fa0bfb6407d5df61dc49c371a3e1c8b21807223","sha256":"d52d8f197679d283dcd7a3623215017ce2b0617b23ae23a84e572b03ff5f3f88","sha512":"9a6e8c71c1f00e72858bbdf371745fd03b026ff9184fb9d2c8de2858de240589f51f3ea52fc61eba79979e40de9c974425c6973078830f82fcf893fcf9afd25d","ssdeep":"","tlshash":"a4219a8f2fe720e06363b17c4a2fd70a3436652b2004c9557b5caab41f9a5ac15a67d8","size":1357,"data":"","first_seen":"2026-06-24T18:57:23.598866Z","last_seen":"2026-08-04T14:22:57.764992Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/aes.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc66e046447092c606f2587837f96874","sha1":"fcf354a8044f494ee1f9fe868dde3f570f50e593","sha256":"5069425b121346b36f730910d05402d50920fc2178b01e0c878b71af4ef1eb96","sha512":"51cd149b2876e90621afc579fb172e253548a851d4c202181e1faba812f5beb1ae9ccf9f153137f60c569e05a79dcb272176e0126eceac54316208d2699a689f","ssdeep":"192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVu:i50/3xoGs/jE839g2FB1","tlshash":"355200c203894a7cf2c92ed68c2f605620f3e54a3d251249efb399dbbc77d895075a36","size":13733,"data":"","first_seen":"2023-10-15T19:29:47Z","last_seen":"2026-08-23T03:05:03.469047Z","times_seen":8544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f35e558855ee557632486e4822124bfc","sha1":"d2d1ba9e0824736f2eb17402faf4eed98fd4b92e","sha256":"50263bb360baf36ca59ae603cc8a618cf71ce0941cb69d2b351ebf0a29531dd3","sha512":"244c0e589c81900f1b94f91ef71c94d5cea9ad2006f43abf8597db1efb025648b0033b11ee97a206ff4571b350545b36b520cd3cb04d762774b7b3efbd524bd1","ssdeep":"384:FGM0vTCHOyQb9gTBgvQ8nU7EckGWADjXAnzqSAOSYR8+sXA:Ubvo/JSvmjoR8+sXA","tlshash":"4d6296856cfb20102063507b3b2fb00a6458a9035508fe4dfaadd7526f88fec95b76f9","size":15575,"data":"","first_seen":"2026-08-04T14:18:14.690069Z","last_seen":"2026-08-04T14:22:57.739963Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects file containing Telegram Bot API","trigger":"credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/jQuery.min.affcbf7942d5bedb0785712.js.t%C3%A9l%C3%A9chargement","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0788a8f61b6fefd5e24be8ee105ccbfe","sha1":"913ab146281c5f797c7213989674694896b198d8","sha256":"3895b1ae68326e2f741061e13771b1c944097c408f33c99699655e0364313076","sha512":"0f093832007cc06039faa4c35e70ac8561aa522cc7c8f5ff0a2f20169a162ae1d74deaa3d9b31e309d1b7e56b537e8b3a40e6ac4ab63b71bf13dc9f993724dcb","ssdeep":"3072:AiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6CqaqVk:AhhryUA3n6em3Yjqy","tlshash":"c1e30aedba45207e93f731bbb47f471e753a966748089081e16898b83cb4d0450abf7d","size":154468,"data":"","first_seen":"2023-11-16T02:19:53Z","last_seen":"2026-08-04T14:22:57.746884Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/protection.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"44d0f786e39655f3f94745fd49fe1eca","sha1":"4e743b9a7c8049e08f228fdcc4d82e9dfee5c855","sha256":"23e616a454506d415be7a8c793c4d26f077e24e5eb65ecf27079b5a881cbcfb9","sha512":"7d1f1e63c0d603b0c07b1940eb452c4068788910e13ae3dc17d34345bf88cad725e535ad71a5c9687cca6d78ec1f820ea675d7837129eadab5f6719c648665f7","ssdeep":"384:BcIhq7q8EHrknA0ntOEItehac2Xw9pFuaFSgK:m0EHacfHJF+","tlshash":"1352647ba88130b65477b37bab57fa11f93254139007ea10bcdd8b102fb18548765eeb","size":13719,"data":"","first_seen":"2026-06-24T18:57:23.585452Z","last_seen":"2026-08-04T14:22:57.739031Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/jquery.min.js.t%C3%A9l%C3%A9chargement","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-08-22T18:24:52.127607Z","times_seen":7454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/aes.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/","date":"2026-08-04T14:22:27.422Z","timestamp":1785853347422,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /aes.js HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://credit-agricole-filtre-exagone.iceiy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/protection.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.694Z","timestamp":1785853347694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /js/protection.js HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4109\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"359a-65567aece1dc0-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13722,"size_decoded":4705,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"44d0f786e39655f3f94745fd49fe1eca","sha1":"4e743b9a7c8049e08f228fdcc4d82e9dfee5c855","sha256":"23e616a454506d415be7a8c793c4d26f077e24e5eb65ecf27079b5a881cbcfb9","sha512":"7d1f1e63c0d603b0c07b1940eb452c4068788910e13ae3dc17d34345bf88cad725e535ad71a5c9687cca6d78ec1f820ea675d7837129eadab5f6719c648665f7","ssdeep":"384:BcIhq7q8EHrknA0ntOEItehac2Xw9pFuaFSgK:m0EHacfHJF+","tlshash":"1352647ba88130b65477b37bab57fa11f93254139007ea10bcdd8b102fb18548765eeb","first_seen":"2026-06-24T18:57:23.585452Z","last_seen":"2026-08-04T14:22:57.739031Z","times_seen":4,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.787Z","timestamp":1785853349787,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.713Z","timestamp":1785853347713,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /js/cgwebprox.js HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4945\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Sat, 01 Aug 2026 17:19:01 GMT\r\nETag: \"3ce7-657ff804beb40-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15591,"size_decoded":5541,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"f35e558855ee557632486e4822124bfc","sha1":"d2d1ba9e0824736f2eb17402faf4eed98fd4b92e","sha256":"50263bb360baf36ca59ae603cc8a618cf71ce0941cb69d2b351ebf0a29531dd3","sha512":"244c0e589c81900f1b94f91ef71c94d5cea9ad2006f43abf8597db1efb025648b0033b11ee97a206ff4571b350545b36b520cd3cb04d762774b7b3efbd524bd1","ssdeep":"384:FGM0vTCHOyQb9gTBgvQ8nU7EckGWADjXAnzqSAOSYR8+sXA:Ubvo/JSvmjoR8+sXA","tlshash":"4d6296856cfb20102063507b3b2fb00a6458a9035508fe4dfaadd7526f88fec95b76f9","first_seen":"2026-08-04T14:18:14.690069Z","last_seen":"2026-08-04T14:22:57.739963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects file containing Telegram Bot API","trigger":"credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.204Z","timestamp":1785853348204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:28 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF2TEBD48SZFQ06STR2YC\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIvL0ZQTNRSwaoyAwWYj0sA1uNRkcpjEA8GpMtoNABTHd0uUUfPwPKJra7%2FnPJ9mnwnryq90UXmoeMW4uFvEd7xGiDqF2tzdLZxsR50hdffX4zchgjWOTe8St1Kd6eM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e25b9db4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/agr22.jpg","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.752Z","timestamp":1785853348752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/agr22.jpg HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8990\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"231e-65567aece1dc0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:28 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8990,"size_decoded":9505,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"45db43156dd46c7b1b6d78620584f0de","sha1":"24d99342eb8ad64b0557b6c809754da7950a64e7","sha256":"b5c4b2f1f299d062776a5c140f7d286ac12ac888b33b4ab5640d72dfd163e1c7","sha512":"15464eb81ce50b5ef1978402e6f2b217525078a32bc496f98387bd486b5b82b7751679ae1f4b95ccd28dc457c4ac6a2dea14e883b7d27248f9e40fb9ff214475","ssdeep":"192:zcbSsUzjlW5llHyALgxC7HE4O9B4O0UMqwuSUdbjMdCYsTx73lem7:zDzhW5llHFkxC7HAQx9BUlMdCdhlem7","tlshash":"bb028d6f3d0e47821c09c8b9fdd51dceb9c3dd25b8e9a77c002b9c8558049b7aa1e0da","first_seen":"2026-06-24T18:57:23.582223Z","last_seen":"2026-08-04T14:22:57.74186Z","times_seen":4,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.168Z","timestamp":1785853349168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3C70Q8X8QD46S9MZWJE\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmTlu0We9cXnDaiNZ4prxItaSci23WoXedf2UpXI8NRwYr2I2XWbfTvayXzkNXTuKPwbrvaYR%2F%2B%2BWCTBTIr0z8AeD5ir8Ryyo4bYcwWrJ9YRcz1QT4EBms3vUE734j4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e84bd0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.170Z","timestamp":1785853349170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3C7YWCXMB90PH60EP12\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5AfQrzr7ySI8DOIscqag7IHQiSHXfsSrysnpC1nNiXSz1WUSQOwkHkAPhPjxC2U%2BzlTJyhio8HwobegE8yJjP3uGBvrwKgt2k2nY7N%2Fa4cAAJYKcraDAkUMxBnNEEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e84bd1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.731Z","timestamp":1785853349731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3XSAH7DHG4VZCTA4NH4\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UUuUIbvaozXN5fQn9sLJbSBIEK6HX77xLDtrm1g5huzvTX%2FXMG16dbTdk893l3bw1GPat6B8kgIaIIdIG9mNNdPFIzE2uM8SyRHXUWpUam4trbyuqlEDzKOjdu8aF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ebcc3fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/Montserrat-Bold.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.981Z","timestamp":1785853348981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/Montserrat-Bold.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/OpenSans-SemiBold.otf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.694Z","timestamp":1785853349694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/OpenSans-SemiBold.otf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/clientlib-part.min.3712078c6c6336e40a9a8d13c2132fdf.css","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.686Z","timestamp":1785853347686,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/clientlib-part.min.3712078c6c6336e40a9a8d13c2132fdf.css HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"1b5972-65567aece1dc0-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1792370,"size_decoded":212448,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (29888), with CRLF line terminators","md5":"a7534febb812d8d08e6d3c2a50fc078a","sha1":"5db131a0ebb23d75c62080f3468d1604249b2978","sha256":"2b4fedc9605a282a80513ef885122330e051ba738da8bfe29bc39def02dbd089","sha512":"f62e4c045f604ad57fab41c27df0852c0055ed904cec8178f999db1261186369d13dd44b5dc49372dc1d9bc175357ea591c95ae7d67fe9ce347902bd59f04f47","ssdeep":"6144:CIlWmASgkKAtPytDDJ6rt5X2EAG3mzmHxKr+rJCTChZywQ3L7e382hHW8vCYUAGV:CIlWm0SNWCn4","tlshash":"bd25d8ed22107269da6bdc17679c6e4acb09a833d9160df7f4aa454803cbbd30ac1d77","first_seen":"2025-09-24T14:45:10.019947Z","last_seen":"2026-08-04T14:22:57.742893Z","times_seen":290,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":44,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.202Z","timestamp":1785853348202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:28 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF2VS432EPT57YEG37Z46\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iMSL%2BMi36BjDJAL6uXhvrObLeHgDXCK0zDWuUX9Ff5bNBsjt%2F9Z40jJvgldBuYK9im00iMORUfJ1fGlbqY6WO4SxPSHFeLYHAi3s5TByhyAtU2rq1VF1OyPKMeTpDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e25b9fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.203Z","timestamp":1785853348203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:28 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF2T4Y7BBS2BNT678KWVD\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4csfZ7Xp83psVmKGuGLdGqtOYP6HqCqpYN5cVJBvMWm2gkUOmsa9tONAcX1hvgECzLVPpUb5Tkd7A92xqbtJldvXcplvCyjo6%2FS8nl5avHHEmACrDpE31pxG2tLtp1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e25b9eb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.354Z","timestamp":1785853350354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4H6BKZY7CA11ARSD2D7\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfsHQqLMi7OQI%2B%2Bdg8P43GCsilFjkyfWIJngNMkl6dARPdFZAHw3d1rwyxQTgXb22uId6VlTDkik0Sup7%2FN%2BUzccLuhP7xsHt%2Fh9afNF0VVkbIayRjy5bgcJ5%2Bg5a6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36efbc7bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T14:22:27.122Z","timestamp":1785853347122,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/html\r\nContent-Length: 867\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":867,"size_decoded":1077,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (867), with no line terminators","md5":"8ffe3590979c6b17e45800e3f358776b","sha1":"52309803fb32e2439ca8ceedd053c96aef626379","sha256":"1a94d4a3be80a9ec0cd190ff96ecf3ef63067b37fd773d641b1c3209f7642a9e","sha512":"611082a53e4ccf420cf16422e1e34264e3915be1bc07b60a929fecfed0f6c810ad118093ef9508501beaac0e684fa8eddffe6e7922e435f5cb38ed30cc7d3a4b","ssdeep":"","tlshash":"261112b9eca0e48a9bc000c01576d55e641696a6a541c9bfd4c252a566a0bdd0e85c3b","first_seen":"2026-08-04T14:18:14.680743Z","last_seen":"2026-08-05T03:50:25.694439Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":30,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/clientlibBoutonVertPart.min.d41d8cd98f00b204e9800998ecf8427e.css","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.690Z","timestamp":1785853347690,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/clientlibBoutonVertPart.min.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/css\r\nContent-Length: 0\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"0-65567aece1dc0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":524,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/OpenSans-SemiBold.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.949Z","timestamp":1785853347949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/OpenSans-SemiBold.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.211Z","timestamp":1785853350211,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.ttf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.639Z","timestamp":1785853350639,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.ttf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/ZAC_2_320X210_SOCIETARIAT.jpg","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.707Z","timestamp":1785853347707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/ZAC_2_320X210_SOCIETARIAT.jpg HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 64525\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"fc0d-65567aece1dc0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64525,"size_decoded":65041,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x210, components 3","md5":"72234bdf598cd13427509ab98ae21544","sha1":"6878d4b0e09d9d05c1736d019386e2e6503e5305","sha256":"c3cbe1ed63b5e19bb4cd97895637167a16b91c59d2d0094c94a1c524dbf5cc5f","sha512":"cd025bf1ff7ddd405a9eaca2dc1330ff1e24e339a194a0c6c569db75bede7d7b53576a0e9290cdd7295559cad5fdba9092a0eb362a61a9cb1e18d15a2af01b30","ssdeep":"1536:6dWorO945OYqZc8A3XQmmfSRwQ6LrtJv34EK2J4By6aEJ:YbqZ0XQRSR36LDP4NAey6R","tlshash":"3c5301e1de086ec6a4cd6c2d2ef6b36d1cb235631a015f0d58b72733ca81e10e499b5d","first_seen":"2024-04-18T11:02:48Z","last_seen":"2026-08-04T14:22:57.745673Z","times_seen":294,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":35,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/jQuery.min.affcbf7942d5bedb0785712.js.t%C3%A9l%C3%A9chargement","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.711Z","timestamp":1785853347711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /js/jQuery.min.affcbf7942d5bedb0785712.js.t%C3%A9l%C3%A9chargement HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 44404\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"25b64-65567aece1dc0-gzip\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":154468,"size_decoded":44953,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (585)","md5":"0788a8f61b6fefd5e24be8ee105ccbfe","sha1":"913ab146281c5f797c7213989674694896b198d8","sha256":"3895b1ae68326e2f741061e13771b1c944097c408f33c99699655e0364313076","sha512":"0f093832007cc06039faa4c35e70ac8561aa522cc7c8f5ff0a2f20169a162ae1d74deaa3d9b31e309d1b7e56b537e8b3a40e6ac4ab63b71bf13dc9f993724dcb","ssdeep":"3072:AiGBhDQvkuvd+89enli3o65ayUA3f+4Ude6em3Y6CqaqVk:AhhryUA3n6em3Yjqy","tlshash":"c1e30aedba45207e93f731bbb47f471e753a966748089081e16898b83cb4d0450abf7d","first_seen":"2023-11-16T02:19:53Z","last_seen":"2026-08-04T14:22:57.746884Z","times_seen":455,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":103,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/Montserrat-Bold.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.989Z","timestamp":1785853347989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/Montserrat-Bold.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/vendor/composer/autoload.php?str=1","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.198Z","timestamp":1785853348198,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /vendor/composer/autoload.php?str=1 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.ttf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.455Z","timestamp":1785853349455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.ttf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/OpenSans-Regular.otf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.555Z","timestamp":1785853349555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/OpenSans-Regular.otf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.785Z","timestamp":1785853349785,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.789Z","timestamp":1785853349789,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.104Z","timestamp":1785853350104,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.315Z","timestamp":1785853350315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.675Z","timestamp":1785853350675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4VAE1B27WMDTF1ZVVDN\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIFGq0LwfGWOMgAQ2S7JKGxDE93mJsR332W1%2BDJyA%2BgBCPwB0KlkNje6jiCBzqesL23ZG%2Fs63K256ROqZuFT2N9KmEd1UMSdVGugA%2F8Dgu9YPUEyQyIg2WYcQO7rLI0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36f1bcb1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:31.062Z","timestamp":1785853351062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:31 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF57CXH5FVAD04SN3MQXB\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40jB%2FqlUUFpPD0rLl3AmKDa9AhvWz57DongBuOpU6P6zl9OJJoWbDYNDGlvOeN9kyb5nQlJ%2FrzvhswIuUlUMWQCc75BS40L7G64p864%2F94UnEhd3Qsjm6tS57cxF4Co%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36f42ce3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/clientlibStoreLocatorT34Part.min.b8abdc06d59fc532f3b9e283e6c2d603.css","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.689Z","timestamp":1785853347689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/clientlibStoreLocatorT34Part.min.b8abdc06d59fc532f3b9e283e6c2d603.css HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/css\r\nContent-Length: 19729\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"264c2-65567aece1dc0-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":156866,"size_decoded":20313,"mime_type":"text/css","magic":"ASCII text, with very long lines (29871), with CRLF line terminators","md5":"34120e304d5240527491e2cb36f7458b","sha1":"a85fd785057af0908f44d15ab3ba452fbe2f91fe","sha256":"101b177443ad26c60a7312e7179576559783790f8ca8166a40d88a27d2ea5419","sha512":"d80a175579c16cec49ea34af50fa775c158764425f29f322c1b09b43a341d3c1da8debef3cd6271ca0b541a93f5a2fe73e48326b769ec0deb8ecbd30804daada","ssdeep":"3072:HJZOxASZ+TAKaLJyoy7cS2CD1A6kKejfNOIB:PgASgkKa","tlshash":"fde311bd6261b63699a7a92f624cbe5d9d8e7d368a450df3f4cc814400d6ee31ec0c27","first_seen":"2025-09-24T14:45:10.015962Z","last_seen":"2026-08-04T14:22:57.747953Z","times_seen":290,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":38,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/clientlibStoreLocatorPart.min.3a019377fa9cf6f00f2cc3d25bfe8df2.css","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.691Z","timestamp":1785853347691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/clientlibStoreLocatorPart.min.3a019377fa9cf6f00f2cc3d25bfe8df2.css HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/css\r\nContent-Length: 17952\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"231c2-65567aece1dc0-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143810,"size_decoded":18536,"mime_type":"text/css","magic":"ASCII text, with very long lines (29871)","md5":"68bb119d132000864d30f045c0b8e7a8","sha1":"4667aa789e83f5a9277200fbe02779c7caad9273","sha256":"d19de74fc68a7a11a4b95dcbf26b058ecf7e2a4aed9700d64ce0fc61a0a6ada5","sha512":"2da908d03cb4f75da3e110038db0c266b1ea5642f06075cb4affead03787dbdfdf57ebad414c83876729b0b19248a9a7df76f941880e9d4750d624b4192d1bed","ssdeep":"1536:HJ76yOBRhNj4rrfLyyvNO5hBC61DnA02fkBVuTf:HJZOBRhNj4rrfLyyvNO5hBC61DnHBV2","tlshash":"9ce3debda262b6379a7ba82f624cbd5c158a3d368d4909f7f58c854405c6ee32dc0c37","first_seen":"2025-09-24T14:45:10.021074Z","last_seen":"2026-08-04T14:22:57.748906Z","times_seen":290,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":39,"receive":30,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/CA_Logo_seul-1.svg","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.705Z","timestamp":1785853347705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/CA_Logo_seul-1.svg HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 16248\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"3f78-65567aece1dc0\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:26 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16248,"size_decoded":16735,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"267925c136126fd813e021bb85ef59d8","sha1":"a6bae108371ab294c00d28c01f3e415feb7ed36f","sha256":"4a3b0d2a941677f6fb37a438d20deacc3cea1d6fdc728f72cf3d7ca099cc0ca9","sha512":"b50c1d4c0f8d5f5eb73edf0652be6a236ea6f423fa98ed00687433ad0ca79f6241ebea29bde321c04508c06f197742a86fa9e93cff1843f6b5303b6231a6ea22","ssdeep":"384:8J0Wk6anSgin0suJ49kx4pytVNRYHwnI2np8yqKgpDTGbwn3sRKd:a0EOS3YJiktDAH8VnpeNp3Gbwn6Kd","tlshash":"ab722242c2a597b99dc3032e82741c9a3cd69cab7471f3bc68af1457d55ccd082ac6bb","first_seen":"2023-05-11T22:53:36Z","last_seen":"2026-08-04T16:06:15.540456Z","times_seen":821,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.173Z","timestamp":1785853349173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3CC7YC4MPX6J0SC5TE9\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQG2KsJTn5%2Fe0vLSaVzfMb6%2BsgcA7fyUHO5hV1RLsUmFKeMPnFjTT3FwCK6vCJpTqqxuWonE7PoHyG4A4Y5pgjgxLSylsDLSVG9VGDzkpUbdWO4JZwLjdIFO2y4%2F%2FVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e85bd3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.491Z","timestamp":1785853349491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3P8H3WPJ8G2ETK80FYE\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WaVFdlAlleOo%2BD3mbj5VX%2BY%2BitVabRzbfgTJmztXHUv0bfNPkKzvEtOKegCHhZfrmfIjqobkx6CPcQBG5nSJ%2F7WjnLlLB3%2F6PEqdtrFCyhDTa%2FfqF6DdZjGs2RAnl%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ea4c10b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.820Z","timestamp":1785853349820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF40JCCQDKWBDPBQYJV2D\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0l0iXMZ8yksk93uhDKl6EA6Zgri6ApBzpa10Fni7PbtmLVjkTaFBuNMJ6qJ564fSm5%2FNo9ti9Bimui8rrjMUW43%2F5kjYts1wJ8EOKGZP9uXKFLZl201LSTQrRcxRYoo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ec5c52b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.736Z","timestamp":1785853349736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3XXRH2A9MWPST8QACPW\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XbAfPaOzepW%2BE3dolLMBPrKemr4IU%2FJL6pH%2Fow8Xp9RLVycCHElT7nem7OFpoo79CGeo8pLctNJOmnwZYXMvV1xgMD5xHVDcL6QIZthmucf7PdW%2BANj2%2BuwVcX54gk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ebdc43b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.317Z","timestamp":1785853350317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.195Z","timestamp":1785853348195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF2VZ1B46AKGCYH9P16G7\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZZMdEIAiHu%2F7zY0uN20RhN25AURDvemzLi6KrmkMyFvyCZ85hLihK9t5EdThB6TVfQNaIYHTeqmfNfb1FHdDmX3uFBf5NliB9XQXg8GqymQECyGra2FI4H2z4zDV4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e25ba0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.245Z","timestamp":1785853348245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"OPTIONS /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-requested-with\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nage: 0\r\ncache-control: no-cache\r\ncache-status: \"Netlify Edge\"; fwd=method\r\ndate: Tue, 04 Aug 2026 14:22:28 GMT\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF2VXQBWTZ01EBHZZ9JQT\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gatpC23wkksAmMO1bZ%2BOryBrB%2Fg1PvvoOyDK3wCTwFa%2Fd6OnWMhxN0vqB6KBnQ9C6GlylRrpGgyH3u%2BTaNHUNbQbpM6YGz9UJNIC7l88Br1%2FJV75IBZolWNO4BOxbTg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a25e36e28ba1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":665,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.784Z","timestamp":1785853349784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.ttf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.423Z","timestamp":1785853350423,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.ttf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.570Z","timestamp":1785853350570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4R3KFDA5TV3XK5GJ0VH\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fq%2B0X%2B93bTmLHDMfovFU3dN%2BGLKmxzmEbP4rhB7GymJz77KJ%2BynWKRzMJ%2FM6hYVjpJWllFZvoIq4xpjQ61UgeslBJA06Bx4U6zC169z8exUtJ483cjFdD7pEcAu0f94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36f10ca4b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/pages/index.php","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T14:22:27.544Z","timestamp":1785853347544,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /pages/index.php HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 26342\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]}],"data":{"size":219824,"size_decoded":26791,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1462)","md5":"71135f8de7466387205acbab19b160b8","sha1":"c43c73d126ee52ecef919c91393349f94c09c6bd","sha256":"cc5b51b9c25187e6731b29d70c117bdd8bcd1954e61291a8bd59dcb4744a82d4","sha512":"4a2da1d96b7088650ba2fbf7cf4b2c5d910032ab651ccfdf900a68b44c50cc68f2136d69b6cc7f756edbb5d2529c99b3d0b1b486df38f9ead836696e71c69fd0","ssdeep":"1536:Va9aMafbypSwvStRsU+mehyg1ICuTO/Iz1qmGvH7xheRz+pk90Ocx1vl6a4fC5vj:N5cipWX","tlshash":"a524613690f40536522bb6d2b1649b176ea7d31fc98e82909fa846d86ff1d312d9f30c","first_seen":"2026-06-24T18:57:23.564946Z","last_seen":"2026-08-04T14:22:57.750691Z","times_seen":4,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.172Z","timestamp":1785853349172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3CCQ74R0W99TZ0M5NP6\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=so5taAZSRRRHQC%2F2Eh0El%2FSzjhmmxUJ0zKi%2FmJugwiY%2BFTegHlGMfvEgMMZtn9mneHef%2BGHmWhCEsA51Pg6bjip%2Bgr7Mwwbiigfjf%2FpDgTdvq%2BOV6KCzAgyO8mqcIlE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36e85bd2b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.351Z","timestamp":1785853350351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4H3NJB9BMHCCCE4XWD1\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dr7bcErhINqF4WG3Tt4M%2BlEcVeVZfEJIXxfrB6AUf6YjieT3jHjrJxyrlvaPFhBnWDDqYgV7hN8eDu8d7pt3HnhryKw21vKSqJ7Coq08QEWqp8SOrr7VAIhxnNnwtGY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36efac7ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.460Z","timestamp":1785853350460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4MGEJQFG71M80EMF7MH\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yj0y1nCfPUUdcwAj8Jpm4EI2la%2BHw5bn%2BZHNKVxmsnag67L4%2Fv4g6C%2BQJ4nlg1Ch8IufzT%2FecsqTgj78c%2FBl5qEpgGmDFifO8AAPrLuQtR1flb7KWz52F8Brtz7%2Fov4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36f05c85b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.ttf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.908Z","timestamp":1785853350908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.ttf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/?i=1","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T14:22:27.506Z","timestamp":1785853347506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /?i=1 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://credit-agricole-filtre-exagone.iceiy.com/\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: pages/index.php\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:26 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/ZDG_GEN_PART.jpg","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.975Z","timestamp":1785853347975,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/ZDG_GEN_PART.jpg HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 243919\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"3b8cf-65567aece1dc0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:27 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":243919,"size_decoded":244437,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=791, bps=218, PhotometricInterpretation=RGB, description=Diverse culture people using mobile smartphone outdoor - Happy friends having fun with technology trends - Youth, new generatio, manufacturer=SONY, model=ILCE-7M2, orientation=upper-left, width=1326], progressive, precision 8, 960x960, components 3","md5":"b259c4797d838add41da1047021d2480","sha1":"13de10f5a348efa8ff3d856f2e347eeff8a33579","sha256":"c4966ab5e78e2270952b89576c4a0a386e8a7ea673c56f0f396d620abf4f81b8","sha512":"bda9659c388a30ca6bc9ea1a7fa341fd8a10f0e46e581350e07659d0fffb3c28e89b0f8d68646dbcc8a4e72fb88dc06137e2bbe7dfddf8ecb8e7d169936a9b69","ssdeep":"6144:Hduec9C93xTGHicdM2vq8f3hloWeHI+MrlcZeuX:o86H/d68oWeoxrlcZnX","tlshash":"0c3412369f4adc83d0d014b5c5a4c347f102196aaaf3c206b7bcf5993fbb9948d58683","first_seen":"2023-05-01T22:58:44Z","last_seen":"2026-08-04T14:22:57.751596Z","times_seen":709,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.591Z","timestamp":1785853349591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:29 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF3SC2PQ83BB5C2R2KAEM\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcgiyMzd%2Fj4AJcy86wjpkQBIooynSvQEddVf7c4jWPO6zYqWSAmceYvTaBQ76xiBi98qnyVjjjXnCNw7lobVYWeq7LRFZRelA1IbATi176BaI4y48A1H4ybX8WAP8g4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36eaec1bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.247Z","timestamp":1785853350247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4DWJCS9VHYB7MKMHSRV\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EY4M35RghL%2B3kfSbvW%2BDPs%2FfvMiM9PI%2Fi0DTgQVA2GNRqOTI86PfkBk7J8ppk1m3ZgpVd85hNp6NOUUNBFwaliSaGncUfIB18BxLCXvHmCDOlY2X4baBDjpQQZOXk2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ef0c74b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.ttf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.534Z","timestamp":1785853350534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.ttf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:29 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:31.345Z","timestamp":1785853351345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404 HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6713\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 04 Aug 2026 14:22:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXiXmaj37F7uXRn0jnJ3wuVcA%2BMbqrECAyNk5KTMCzhMx3rFnt%2F7hisnzLejCPwtJZ7Uug%2FWhICWdGvUSx2egV7iQHegZJk30SMq0WKajo0Nh2%2FMQRxbSwV%2F4DFFjjs%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KZ6JF5G1VPQD5D3NHF1KE3A5\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a25e36f5ecf3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/OpenSans-Regular.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.922Z","timestamp":1785853348922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/OpenSans-Regular.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/OpenSans-SemiBold.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.036Z","timestamp":1785853349036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/OpenSans-SemiBold.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/saved_resource.php","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.968Z","timestamp":1785853347968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/saved_resource.php HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.898Z","timestamp":1785853348898,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.824Z","timestamp":1785853349824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF40NHY45R2RK141P7FBE\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZxN0ECh488ksPbPPE0xpt7KRQTMMj25W14p438wfiFPXv6dN7R%2Bhi%2BgddGqniCf7X4PjypLQUk6GQ9o6Wk9VGPhJjJ8yoMOCUjeEff4DK9hDXrwrsd61Qe89E4MViw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ec6c53b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/logo_ca.png","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.708Z","timestamp":1785853347708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/logo_ca.png HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2037\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"7f5-65567aece1dc0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2037,"size_decoded":2550,"mime_type":"image/png","magic":"PNG image data, 83 x 64, 8-bit/color RGB, non-interlaced","md5":"a5777291aa794d7d07285c839571662a","sha1":"284f3d6b64462c946a640072bb57e512307bf8ab","sha256":"1c8399c9f4f09feb8f95fe39465cc7e70597b0097ad92da954db82646ec68dc3","sha512":"5b0fd3527b820fb9f9fe008fffd0b2a6b69114ea51ece155aa47dedf9fa3097fc3eb1e8a0a24e19b1c92b9607a7b8dac4e732739930106822063b7c8048b0585","ssdeep":"","tlshash":"a0411addbc7e4ad8c683d0b585d0115f67a042165a91bbdca70f012a4ced722b0ea96e","first_seen":"2023-05-11T22:53:36Z","last_seen":"2026-08-04T14:22:57.752493Z","times_seen":769,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/js/jquery.min.js.t%C3%A9l%C3%A9chargement","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.710Z","timestamp":1785853347710,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /js/jquery.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30679\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"15851-65567aece1dc0-gzip\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":31228,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-08-22T18:24:52.127607Z","times_seen":7454,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/npcicons-crunchy-r2503.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.990Z","timestamp":1785853347990,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/npcicons-crunchy-r2503.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/Montserrat-Bold.otf","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.697Z","timestamp":1785853349697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/Montserrat-Bold.otf HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.827Z","timestamp":1785853349827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF40SHGVRCVWP6W290XS7\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D62oixYgKxfLnUxG5OGnvK4DRQZK3laBNdPdQXGD4TPTejAkxJP5yNxeOv68c0HiLkMLcXIEHrgFG9pqzusbhjCdOGsKyaCAQLFpiV%2Fb3kXEoDJ9hJ2TyckEMPwR4Zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ec6c54b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/clientlibStoreLocatorT33Part.min.c485a5e6992cb88b4397566cc08098ef.css","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.687Z","timestamp":1785853347687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/clientlibStoreLocatorT33Part.min.c485a5e6992cb88b4397566cc08098ef.css HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/css\r\nContent-Length: 18765\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"244fd-65567aece1dc0-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148733,"size_decoded":19349,"mime_type":"text/css","magic":"ASCII text, with very long lines (29871)","md5":"673f2198b9a8e647ee5f9a14f1eb924d","sha1":"695fd975c966e3df6449edf905e712d3379e3028","sha256":"5a10505b04e62969b3bbe99f3a96e3204f27a1d227e2d575b60e4d82f884799f","sha512":"3ea6b2de02ce141eb34425f7142ae7f70f5e72bf78f9f67da353530e73c540428cf973295db14c7134bad4cefdf874113259bb59b9ffefe7bac2d036f94f3ad2","ssdeep":"3072:HJZOBRhNj4rrfLyyvNO5hBC61DnHBV44+T6w/N:PcRhZHBC4+T6w1","tlshash":"7be3febd6262f6378a7ba82f624cbd5c158a3d368d4909f7f588854405c6ee32dc0d37","first_seen":"2025-09-24T14:45:10.022598Z","last_seen":"2026-08-04T14:22:57.756016Z","times_seen":290,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":41,"receive":30,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/css/clientlibStoreLocatorAccesCRPart.min.ca0304dfde66b3ec15c3904c506f0c65.css","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.693Z","timestamp":1785853347693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /css/clientlibStoreLocatorAccesCRPart.min.ca0304dfde66b3ec15c3904c506f0c65.css HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: text/css\r\nContent-Length: 17875\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"230ce-65567aece1dc0-gzip\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 03 Sep 2026 14:22:26 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143566,"size_decoded":18459,"mime_type":"text/css","magic":"ASCII text, with very long lines (29871)","md5":"6f98fbef695e2acb58088c0a047ab162","sha1":"c60f1d25303d9f070246950348ac82635d18443a","sha256":"da1d97a506e8f489f94057f36e895c1ce2e52e890f433657736067a4f122ee59","sha512":"5d77ab0a912e82cad476ff3cd0f92ff7babcf3c1289ebd3aa5df167afa6a475ff4f672b865638564b676d60308e144fac99d21032ad50649e241be9cfd0703ad","ssdeep":"1536:HJ76yOBRhNj4rrfLyyvNO5hBC61DnA02fkBVuTG:HJZOBRhNj4rrfLyyvNO5hBC61DnHBVT","tlshash":"c1e3debda262b6379a7ba82f624cbd5c158a3d368d4909f7f58c854405c6ee32dc0c37","first_seen":"2025-09-24T14:45:10.026175Z","last_seen":"2026-08-04T14:22:57.757778Z","times_seen":290,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":41,"receive":32,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/NPC-logo_Agir_chaque_jour_CA_H_Desktop-1.svg","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.702Z","timestamp":1785853347702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/NPC-logo_Agir_chaque_jour_CA_H_Desktop-1.svg HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 22541\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLast-Modified: Mon, 29 Jun 2026 17:21:03 GMT\r\nETag: \"580d-65567aece1dc0\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:26 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22541,"size_decoded":23028,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a6438815d53936ba84ffbef78c8bcfc","sha1":"e178faa510c663b51d88b5979bbc53c73fcaf3e1","sha256":"5c44321c0ba44a1fa665ba4c928fbebd869a3082c458bd2d20a0d07a4e5fcc24","sha512":"3f1f451e53225e4ae8bbf17928afb2c39c0b53d53efe11e43441b0f2a2daf266b79c101ff65bedbac17ce6fad1eb7cfda71024bfa70e937b8d8420d2573b7e04","ssdeep":"384:80T7cbFOm/vXADhP6xypgGcFzcGmuJZ7aDLNOe4GiTM3+:fTIEh/SFzc5EZ7cLNH4GiTM3+","tlshash":"b5a201571308e7faaee1065c9b39189179dadc8be030f1d0aa7f2417d14dcd4a4acbad","first_seen":"2023-05-09T12:54:21Z","last_seen":"2026-08-04T14:22:57.760854Z","times_seen":886,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/images/icone_ca_pwa.png","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:28.747Z","timestamp":1785853348747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /images/icone_ca_pwa.png HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:28 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=2592000\r\nExpires: Thu, 03 Sep 2026 14:22:28 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.944Z","timestamp":1785853350944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:31 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF53PN6DT88TFG1R774CZ\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9A78XN6CjensaONoIywiyfPOxpxHVbkq4o4a57zJKYvryYi%2B0u9XavnLDsxQNvNakmFuAXCpSPEmt25R6ZYoj3HWnhgXPBawSE7WEx2Cwm2ZhJYmuAxZ2eXzqJEKig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36f36ce1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-agricole-filtre-exagone.iceiy.com/fonts/OpenSans-Regular.woff2","fqdn":"credit-agricole-filtre-exagone.iceiy.com","domain":"iceiy.com","tld":"com"},"ip":{"addr":"185.27.134.205","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:27.973Z","timestamp":1785853347973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iceiy.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:1B:11:96:51:95:25:92:50:B0:24:23:EA:D9:65:CE:C5:C9:FB:5A","sha256":"D6:83:43:2C:3F:21:EF:78:C9:44:EA:2E:9B:0B:42:E8:A0:0E:1B:E9:9A:B5:47:D9:3C:1F:99:FC:37:51:D4:B1"}}},"request":{"raw":"GET /fonts/OpenSans-Regular.woff2 HTTP/1.1\r\nHost: credit-agricole-filtre-exagone.iceiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __test=69ecb4c686b4b4f8be52075e2b70a614\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 04 Aug 2026 14:22:27 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 215\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\nX-Robots-Tag: noindex, nofollow, noarchive, nosnippet\r\nLocation: https://aeonfree.com/error/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 04 Aug 2026 14:22:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"credit-agricole-filtre-exagone.iceiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:29.832Z","timestamp":1785853349832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF40XF91GZ8TNYNN47DMG\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWro1dVlhdwRE5b28S0f%2Fcfzj0h%2FTmG5Q5xjn4NWq95xYo%2FyQnvv3b2LILocBVZKdrGsXIsVzZ7i8%2FeoNcpdyZbDaYZCnSWfkdHPvP%2B6ZCc73fIq%2BcKUs8i3FkU4RKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ec6c55b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aeonfree.com/error/404/","fqdn":"aeonfree.com","domain":"aeonfree.com","tld":"com"},"ip":{"addr":"104.21.49.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://credit-agricole-filtre-exagone.iceiy.com/pages/index.php","date":"2026-08-04T14:22:30.140Z","timestamp":1785853350140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aeonfree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 19:03:04 GMT","end":"Wed, 14 Oct 2026 20:02:53 GMT"},"fingerprint":{"sha1":"DD:F4:BC:4A:00:A3:89:9A:1C:F9:53:36:80:FA:A9:DD:31:39:70:2C","sha256":"48:A8:94:BE:A1:EF:F5:A6:94:8F:C7:5A:5D:29:4A:33:CE:43:ED:72:90:73:0B:6C:FA:0F:87:09:1E:3F:DE:54"}}},"request":{"raw":"GET /error/404/ HTTP/1.1\r\nHost: aeonfree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://credit-agricole-filtre-exagone.iceiy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: text/html\r\ndate: Tue, 04 Aug 2026 14:22:30 GMT\r\nlocation: /error/404\r\nserver: cloudflare\r\nx-nf-request-id: 01KZ6JF4AHD4NKYJY0REQM46D6\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXdJVOJIc%2Bf2ODvkzN5WAZZ95PZw93H%2Fhp%2FjiyilUEN8FS5SiAOZTqvK5RtCoug2CqzjYwNw7viBrEpX1jT6z4lNHuzEWNfRnutzs4pMqsh7e5uZLjea24UGa5ptbgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25e36ee5c68b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T05:26:41.349784Z","times_seen":18049598,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}