{"report_id":"98bc5daa-5636-499a-a700-e241e8438367","version":6,"status":"done","tags":["government","tax","france","phishing"],"date":"2026-05-15T14:48:19Z","url":{"schema":"http","addr":"dgpn-crypto.fr","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":0,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"final":{"url":{"schema":"https","addr":"dgpn-crypto.fr/","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"title":"Particuliers | authentification","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dgpn-crypto.fr","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":0,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T14:48:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]},"summary":[{"fqdn":"dgpn-crypto.fr","ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-05-15T14:47:39.09051Z","last_seen":"2026-05-15T14:47:39.09051Z","alert_count":160,"request_count":32,"received_data":1289094,"sent_data":15278,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cfspart-idp.impots.gouv.fr","ip":{"addr":"145.242.11.213","port":443,"asn":34177,"as":"Celeste SAS","country":"France","country_code":"FR"},"domain_registered":"2008-12-10","domain_rank":14436,"first_seen":"2024-03-22T08:57:07Z","last_seen":"2026-05-15T14:47:39.694625Z","alert_count":0,"request_count":2,"received_data":418,"sent_data":1030,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dgpn-crypto.fr/","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"introduction_type":"scriptElement","is_inline":true,"md5":"189373348e6aa9865661fae548f99f4e","sha1":"8da638dec75b0521062789273af37b4a6183e98c","sha256":"4a0e0bcd7d17395fa314da8b5cda934b04200d9d8b9ed858f06c64408237670a","sha512":"5595f5c59e5026f16128a0750f9e81823a8eb38d47b4f6dea7bc2350f28e58507d9bdf79b115b586f5aa8b654c3fba08cd98b9d0d5897b0d5f706b2b28f62700","ssdeep":"","tlshash":"87e0205f23d705354fdb3616064f624d743640537d14d542792c55e40f58e5291ffbc0","size":412,"data":"","first_seen":"2026-05-15T14:47:42.103078Z","last_seen":"2026-05-15T18:01:40.871921Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/icons/media/volume-up-line.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/icons/media/volume-up-line.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/utility/utility.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 630\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-276\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":630,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e75e11229cf9b09e8c644bf54e481f02","sha1":"01b37b550b41f385123454e16f9dc50f92aa10aa","sha256":"3716000ad3aa44b0676756a71b450584a9080ae3645cec97b77a3dc7d7511a01","sha512":"5b6827742b341e9801e39d3844273f267b8507c948bcfb54e0ce920e7af249464431bb56ee92e281d59b42f616b898f8f40b1084deae68babeb5fcfead351ca7","ssdeep":"","tlshash":"57f0ddf7bf3d428d556b2e41af246820176f34b53286122d885d277510ab88cd827904","first_seen":"2025-11-26T13:27:03.206928Z","last_seen":"2026-05-15T18:01:40.870065Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/icons/system/refresh-line.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/icons/system/refresh-line.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/utility/utility.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 244\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-f4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a597cfaa3fd9c3964cb1067fceac9d73","sha1":"8504b9fd07266689b98018082307705be9ca7872","sha256":"49c5902d30113792bfa3985aebee5d7604222c3f4280998e50243b03349cb7e5","sha512":"00c8a998ae1c329a470bcd2bc918de2a4051cd022d8cf752ac117da29b117b97e9452c97329659c901ae8ebb4c1ee598c3ae73365afb6d8c5b38e0dda4aa19a8","ssdeep":"","tlshash":"c4d0a7adb29c3a1c5a1a87519b75f650230f713db386056cefce2b302e09e61d05bd6d","first_seen":"2025-11-26T13:27:03.252196Z","last_seen":"2026-05-15T18:01:40.843087Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/matrix.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/matrix.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/captcha.png.html","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /captcha.png.html HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/icons/system/close-line.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/icons/system/close-line.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 210\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-d2\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":210,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e149b4b27531bcb99bf010749063b5f","sha1":"822f11a8ad1134ecaad17b46c55db8bc56597137","sha256":"0be127f1a5ee06cad6cc4dd668cfc27ee58d6f3e6841ad9dd0abfef3d9216b3a","sha512":"5ebb6a2b12759721f8abe619125ebed0395bd46eac2b515988ac11c9a8e2ae7511ffd9bbeb91eda3a7f847fb12f25a4c008d643b6aaf22fc451d717d6c001f35","ssdeep":"","tlshash":"ccd02267c30cf008250fc730dd34f9a0180f7024cb8d122cb1a26b20568ce61e02e86c","first_seen":"2023-05-17T18:11:56Z","last_seen":"2026-05-15T18:01:40.837708Z","times_seen":106,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/css/styles.fc.min.css","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/css/styles.fc.min.css HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 May 2026 18:57:46 GMT\r\netag: W/\"6a03782a-20a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2d19649c3a686c215e078d37b1236f53","sha1":"68e6685adb8875de760f2f952405305ed0b2e6c8","sha256":"3cb69d2764663142c76ea49104b1e592cf778aee56532e9c4fa8d9dbed4c811e","sha512":"57a7cfa3015fb2d4b01ab95a2b0c9859acbc2b0ca0a4da297d8da35daa948e5e0627565dd1fa81449c91056ef8bde91f1a824258aeced5340c1b2e9ecf869a77","ssdeep":"","tlshash":"6ef08b52e3f665066132cc14f20b2935835c981397ebeb3917a910e4cdd07c9527039b","first_seen":"2026-05-15T14:47:42.088074Z","last_seen":"2026-05-15T18:01:40.839207Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/messages.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/messages.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/css/authent.css","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/css/authent.css HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: W/\"69c5034e-19e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":414,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"94c879d1676054d48a87f9d3fab5abf2","sha1":"7fdf35ce5dedfaa3f834e082fc19ce62a321df3a","sha256":"985202a200b922f6013f3e3029694cdc0b9713d58044b52e5203312c40820f5a","sha512":"cc0358b2070adbf45f442c41e7445dfd349154e2e8dd122ce76fcd342970ab9b3a912d1ca70924d09d1f1fd84fcd9295321476ff8c29a7c21d364813b25e370c","ssdeep":"","tlshash":"6ce02311b0f6297855bd441595c5d77b383f51d31b097e302b40fa914fc47c270b2758","first_seen":"2026-03-20T13:51:21.404458Z","last_seen":"2026-05-15T18:01:40.858033Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/images/money.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/images/money.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/icons/system/arrow-right-line.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/icons/system/arrow-right-line.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 189\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-bd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":189,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e4843104c8eb36b1dab7bcb833f0776","sha1":"9ddc091163de5dab83e69c7f814c01aca65ac393","sha256":"2929a4704a947bad8f1bb7cd2e442b4df9f6cd201a86c5e38302586c9db5bbda","sha512":"b686a44eaf016dd68810df04cf0da148fe36fd7988003a170f066203e9f814c026e2ededda791e467ef491094dd2540f79740e2ceee16dcfe18a1b6869526252","ssdeep":"","tlshash":"bbc022d7c3083a4a85dc8620de68a328a4aa3088020b019dd354b120a28f843a833628","first_seen":"2023-08-04T14:51:26Z","last_seen":"2026-05-15T18:01:40.835857Z","times_seen":95,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/fonts/Marianne-Bold.woff2","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/fonts/Marianne-Bold.woff2 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42092\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-a46c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 42092, version 1.458","md5":"02c71f14a05443355bd71907d4a9c066","sha1":"2589dda928ea6ed96bf556e6763e5bb22f25c487","sha256":"3f585632ed9bc498bc9fc995f1e7f8851b64ac667b8f8692662fe472bc0f6d65","sha512":"eb80c1ee3aa32048664cf907c9a4bc1e461597d4a961206d9f6593e25d4cfb643c085cdd69b0508a1b6ced6c12fdcd4e75727109683075586ce2cd97ea7ab132","ssdeep":"768:tgAYEZ0Y1f1y5MfpQULyaOsGTD498rASR8CNMw1LoQe3Ay:sE9E5lWFGA98USRzMUoQI9","tlshash":"361302a82b1bee7697355af2c1890d5b585220ed401b2114f3e112cb7681dafdc2fa7f","first_seen":"2023-05-17T18:11:56Z","last_seen":"2026-05-15T18:01:40.856869Z","times_seen":282,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cfspart-idp.impots.gouv.fr/out.wav","fqdn":"cfspart-idp.impots.gouv.fr","domain":"impots.gouv.fr","tld":"gouv.fr"},"ip":{"addr":"145.242.11.213","port":443,"asn":34177,"as":"Celeste SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:58.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfsfc.impots.gouv.fr","organization":"Direction Generale des finances publiques"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:DF:CE:06:09:3D:73:B8:8A:B3:BD:CD:9B:56:E1:6B:95:24:97:63","sha256":"84:B9:9F:C8:42:04:72:AA:B7:A3:19:22:0A:D8:89:D4:DC:DB:32:D1:CF:ED:CA:36:73:E5:A4:DC:61:46:50:32"}}},"request":{"raw":"GET /out.wav HTTP/1.1\r\nHost: cfspart-idp.impots.gouv.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Mire_FI\r\nDate: Fri, 15 May 2026 14:47:58 GMT\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Length: 3674\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"Mire_FI","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T18:20:43.473553Z","times_seen":15229697,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":106,"dns":0,"connect":27,"send":0,"wait":29,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/auth.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/auth.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/urls.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/urls.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/css/dsfr.min.css HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 May 2026 18:57:46 GMT\r\netag: W/\"6a03782a-ad43c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":709692,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65388)","md5":"f108fa4186e9598b2b1af94b7f8ae4a7","sha1":"6da564a3b317b620619be3bbb1d7005559fcf227","sha256":"29ec1cef5dd9253b17aac237a451af93b2a1a2c6073ac40447e8b6253f872357","sha512":"f532497f7044b46ccba89b20e3a77404c781b1d0aae60c2c3974d59fad0f212d9a35a01b0521993c7f35f79af76288b226e3fd1d60e63f7b48f8685581acfa46","ssdeep":"12288:RQk7LoBK+ykNZJzJc9FZyjr7UyWaS7z7JvilcB+00wDlxCblZRfz84P7dTKdnKJO:iNKazJc9FZyjUyWaAFv7+00wDlxCblvq","tlshash":"80e4baa9b58070bdfea784a552e1338c623be742e903aabdf05f77d042c27d13512d66","first_seen":"2025-10-25T12:28:17.047633Z","last_seen":"2026-05-15T18:01:40.868223Z","times_seen":8,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/fonts/Marianne-Medium.woff2","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/fonts/Marianne-Medium.woff2 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41940\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-a3d4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41940, version 1.458","md5":"ac46f818607c812f27002a1d3631ae3c","sha1":"773eea4256a2d69b44b523c902a5050238df68c8","sha256":"bc750a156d8c73e0564197f87d01f6093dfe646a7402bcaed1f6e1e0f5d6c5ab","sha512":"a07fc640fe50205a1763c8fe069dde110143c35d01fa9ac77aeb6655e5f49a046a80b23ee5f4c422d9c9f2c0ef8fc154bc7aa16dd47190228747edf7cb3e8149","ssdeep":"768:mFhZ8LqGOEn+E34yeqveuDiitceL8QL9J1QSlz/n9oQHD8trihzzLRNooM:mFhZfGO4FIfq2uDnc+L9J1QKCQHWexno","tlshash":"2a13f2938ba0758bf95b297936c37451da25c77fde1b169f1001e908f189cbb6702b8c","first_seen":"2023-05-17T18:11:56Z","last_seen":"2026-05-15T18:01:40.841864Z","times_seen":276,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cfspart-idp.impots.gouv.fr/out.wav","fqdn":"cfspart-idp.impots.gouv.fr","domain":"impots.gouv.fr","tld":"gouv.fr"},"ip":{"addr":"145.242.11.213","port":443,"asn":34177,"as":"Celeste SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:58.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfsfc.impots.gouv.fr","organization":"Direction Generale des finances publiques"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:DF:CE:06:09:3D:73:B8:8A:B3:BD:CD:9B:56:E1:6B:95:24:97:63","sha256":"84:B9:9F:C8:42:04:72:AA:B7:A3:19:22:0A:D8:89:D4:DC:DB:32:D1:CF:ED:CA:36:73:E5:A4:DC:61:46:50:32"}}},"request":{"raw":"GET /out.wav HTTP/1.1\r\nHost: cfspart-idp.impots.gouv.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Mire_FI\r\nDate: Fri, 15 May 2026 14:47:58 GMT\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Length: 3674\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"Mire_FI","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T18:20:43.473553Z","times_seen":15229697,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":99,"dns":1,"connect":31,"send":0,"wait":31,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/configuration.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/configuration.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/dist/artwork/pictograms/environment/sun.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/dist/artwork/pictograms/environment/sun.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/icons/system/external-link-line.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/icons/system/external-link-line.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 230\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-e6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c203f4f84658c22ac6fe04e5c60b74b","sha1":"b4974f02c3d9eeebfa078439c041f05a4449ddf8","sha256":"e6f54f5ea8ae2921980b307fa4b770105f9a607d055f88bbd8abc2207b5076c8","sha512":"6a0edae7285a4769f0cd8af8025d0d9426edd3edb3e93e1cf005740f3e29b575f242228091cc53b7785129b7417d9a7cabd3823884b9f3a9a366eaef14998b87","ssdeep":"","tlshash":"33d0a7779b0d68dc4517c9506e37b544135ee254933801ac915c5139954310bd427518","first_seen":"2023-05-17T18:11:56Z","last_seen":"2026-05-15T18:01:40.855577Z","times_seen":189,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/jquery_002.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/jquery_002.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/bootstrap.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/bootstrap.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/dist/artwork/pictograms/system/system.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/dist/artwork/pictograms/system/system.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/dist/artwork/pictograms/environment/moon.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/dist/artwork/pictograms/environment/moon.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/fonts/Marianne-Regular.woff2","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/fonts/Marianne-Regular.woff2 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41328\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-a170\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41328, version 1.458","md5":"0e7c3d5c1ea0b9c57a67eeedef5c28f3","sha1":"ba701f7370e4b9bc32f385984759ca6e49aac67c","sha256":"7ce61538d829ac928d226e371c99066f6f697338a4a587d71236e86e39dbb821","sha512":"eb551203b0999d58a1ee4ec2bf780598e6eafea6dff55fc2ba8043ed3b1149966f6863f560116a2788e8fd9e937e6a765f2b8ddbff29f59e2cd3161eea6e18f2","ssdeep":"768:y+v7PgYOV7qT5Qp1k0Su+FVpoUxhUr/YCVFsU9YPsN7WHC5X4:b7oxqT5QJS7FVp7Ur/YAFsU9nNqHC5o","tlshash":"c6030285f09d74ab44d24e7b5f122f52e4a9ed7f32c29871aec1747411b22ffd4a2080","first_seen":"2023-05-17T18:11:56Z","last_seen":"2026-05-15T18:01:40.867252Z","times_seen":283,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/icons/system/fr--theme-fill.svg","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/icons/system/fr--theme-fill.svg HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/static/partDsfr/css/dsfr.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 482\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-1e2\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59b095c1198bac0d81eb306296ccf53d","sha1":"24e8b85a9e7f8851dd0ca98934ab12e857b170ab","sha256":"e940c7c5ec9ff5caaad54af4217865a9a18ede167a6684baf084f64afca478e6","sha512":"8bfa911171b61f49930feeb21eea49d4bdf63d73592f8da87873fbab171192209329220cb903d32365f2488cd9b33fece456e9cf99df3e60442e2e8e6674263f","ssdeep":"","tlshash":"fff0e9f75f9c382c6776c9515d26e540220975bd030440965658e768c1c3c13f41f788","first_seen":"2023-09-18T15:19:12Z","last_seen":"2026-05-15T18:01:40.865556Z","times_seen":61,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/favicon.ico","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:58.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:58 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/idContact.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/idContact.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/franceConnect.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/franceConnect.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/images/Small-logoSMART.png","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/images/Small-logoSMART.png HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2347\r\nlast-modified: Thu, 26 Mar 2026 09:58:38 GMT\r\netag: \"69c5034e-92b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c546c9a78e206d482076fae524cedbe5","sha1":"d9ad14007be975fb477763f26ce653e332b56c70","sha256":"dfcae6bf0ca22253e333881e0bf7eb42d14057eb00024a5bd19943b04cbb95ec","sha512":"7dfb121d0319dd1345b6b2fc3f87c1204c65318ce9c8ec4c72e5a4fcdc9831c6e02c35a22139ce4c7b8bb099dce2a56a5a0afede2988b35292d70ec364d50b7a","ssdeep":"","tlshash":"61412b6ec9e82b6d8df2fd05c51585c8778231915c6013ecd8446fb48ea607c0afa42d","first_seen":"2023-07-10T14:26:01Z","last_seen":"2026-05-15T18:01:40.870956Z","times_seen":37,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T14:47:57.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 13 May 2026 12:14:12 GMT\r\netag: W/\"6a046b14-144b4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":83124,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (519)","md5":"924cd21c8969715e1dad4807e3cf1239","sha1":"3ed2d93b9fef3fd09c0548a0904cd10d5b98360b","sha256":"1993045ccda4bb60440875e4762d2d9828d5496f6c541a32254cddff94f17b1c","sha512":"01efbe51ff9d0f3468380088dd6edd402bdcb9aec8719fe091e0a6cc95a3b71aaf25897037f112cf4ee934cd717c7e5f2c905558311a06973822f000b9b72dce","ssdeep":"768:T1IBs73MdMP0sRhd+sKfEHMeXiTMeNb7XqEqAQip:Tq9bRz","tlshash":"bd837f60b5fc1c3a019a81c9b290670b6e6bca33ca5e505476be07d52fc7fd0aa0775b","first_seen":"2026-05-15T14:47:42.095832Z","last_seen":"2026-05-15T18:01:40.862678Z","times_seen":3,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":53,"dns":1,"connect":22,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/js/jquery.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/js/jquery.js%3Fv=2d3acb7d3a3540735bf862c9aa14a467c82340a1 HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/static/partDsfr/utility/utility.min.css","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /static/partDsfr/utility/utility.min.css HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 May 2026 18:57:46 GMT\r\netag: W/\"6a03782a-54538\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":345400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65410)","md5":"16611328f1e90bf8f88e2ff466b8d81d","sha1":"eeaa7a54c2c27601711ddcd750136c45478aceff","sha256":"02d30a8e8d4f78fca86c21cabc11fc9a4006c57d7b043b57f7ec89e382715a75","sha512":"25f451f8fb3cd15075fce171a80bc79ca04f8d3bb508638ae8e99f091879fe9a2a76b7e07ac2399b3bf417107e99b595cd034f09f5c93b4c4afd414181b3b54f","ssdeep":"6144:kbOLVEOmooolVGInnxmwtY292mVgqwlOUNugPD:sOGooolVGIdtY292iwlOrgPD","tlshash":"1674bc5df19140ef2b970cb573453716603b97a3dac0df6aa4afa254c3ba5e432228f1","first_seen":"2025-10-25T12:28:17.058449Z","last_seen":"2026-05-15T18:01:40.869152Z","times_seen":8,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dgpn-crypto.fr/captcha.png.html","fqdn":"dgpn-crypto.fr","domain":"dgpn-crypto.fr","tld":"fr"},"ip":{"addr":"180.178.160.153","port":443,"asn":0,"as":"","country":"Pakistan","country_code":"PK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dgpn-crypto.fr/","date":"2026-05-15T14:47:57.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpn-crypto.fr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:21:01 GMT","end":"Tue, 11 Aug 2026 12:21:00 GMT"},"fingerprint":{"sha1":"26:EF:2C:96:D4:12:DA:9B:9B:1C:3C:FB:F5:A0:5F:0F:27:D6:A0:08","sha256":"8F:88:58:F2:2A:88:DD:D4:63:DB:2E:FE:04:F1:93:3C:A0:37:1E:0D:27:DD:B7:CA:00:C0:5A:BE:DB:4A:D3:BF"}}},"request":{"raw":"GET /captcha.png.html HTTP/1.1\r\nHost: dgpn-crypto.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dgpn-crypto.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 14:47:57 GMT\r\ncontent-type: text/html\r\netag: W/\"6a00b3bd-328\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-15T18:01:40.840654Z","times_seen":36751,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-15","alert":"Phishing Block","trigger":"dgpn-crypto.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"dgpn-crypto.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - French Tax Agency","verdict":"phishing","severity":"medium","comment":"Resource observed with French Tax Agency phishing","tags":["government","tax","france","phishing"],"meta":null}]}}]}