{"report_id":"a37f89f2-294a-49ee-adb2-5f41a2f717b7","version":6,"status":"done","tags":[],"date":"2026-02-20T13:19:23Z","url":{"schema":"http","addr":"dspf-cheminotcgt.fr","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"title":"Carte des secteurs","dom":{"size":80604,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15828)","md5":"c42de44a288d73b2b82f73bbc85dc101","sha1":"0618b48f3d299dd2c7ff5f264c8c9bb52478d831","sha256":"799a2aac1e145a928ebc82848d571f444a477840a3e094e7c55be155a0f873b7","sha512":"3d109a0dca8061e529a37f02a0941a32d8a6cbf9eae2c1d2b50d1589b92155bb453cb1ee49c4b6170d8e3f84ac302a22c8a1fc30ab9253b38b1cd0486a6b4ffc","ssdeep":"768:e2r1S03LBrePKG3Aiock+wdy1IK1K1KqKRKaKFK9KbK8KAiKDKDKuKqKOKiYkqT0:eOy186qwM//U4ZTd/7/gKWUO","tlshash":"9773b52402b5497ed19f3d94e29b230462fb8353be5c53f4377fa5942f6789888734a8","dom_hash":"domhashb8843dfcd34a1f5c061b2f856e81a613","first_seen":"2026-02-20T13:19:28.499004Z","last_seen":"2026-02-20T13:19:28.499004Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dspf-cheminotcgt.fr","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T13:19:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dspf-cheminotcgt.fr","ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2026-02-20T13:19:24.065287Z","last_seen":"2026-02-20T13:19:24.065287Z","alert_count":20,"request_count":10,"received_data":633698,"sent_data":11133,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-02-16T02:28:05.941404Z","alert_count":0,"request_count":3,"received_data":40252,"sent_data":1560,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9b18238c00302da05c22166cc129059e","sha1":"5f68680d3da34f1696495204361e53b6a5b9a8fa","sha256":"4e5835e6e3b02166ff707502a6dc1b927d5a7cdd065950e94e1e05ddf2d90b6e","sha512":"380e161afb873dde434f7d7cdcd6b904f6c2c8c5409df2b47f19e60738dd6fd8c3241fd6e26548ad0f55151236d6c594a422bc545ac93c4fb8477fe63ab11a7f","ssdeep":"","tlshash":"1fc08cc008c38d00c3233985c07aa43b213c2671d17d44661b38b758903305ae18cc6d","size":151,"data":"","first_seen":"2025-07-03T16:08:02.231896Z","last_seen":"2026-06-20T02:25:42.423161Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"97097a7ea80c6d72ec540bc600886aa7","sha1":"323d941b21ec313f35f58b18da3b760451916d45","sha256":"05f4098561e3534793c833f7658ea8298fa048e160d29960c94c772c09296d6c","sha512":"924d79d5ca6360a6e0ef237c66ae61bb876767bfc9f7c3d59d1c4f38a1311f442e1a163cf3400f49627338b96d8e5fd2afb60279bbcf5811404518adca279d16","ssdeep":"","tlshash":"50c012c409d39d0183733cc681be617b763c2671d17d45561f786b5d9473066e25cc69","size":185,"data":"","first_seen":"2026-02-20T13:19:28.539958Z","last_seen":"2026-02-20T13:58:46.159042Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a4ecba1471b8db8c218a2d07b077ee","sha1":"eeae26cba53413392c6fb29f94a1d6874919be06","sha256":"7155486d3c2a795d1cc6234dcbcc877020ef5b4b352adbc7a13f5829c6b9db4c","sha512":"7310167c35148f35578a5c05db24aeac5fbdcf7aedf910910c0e0befcbe09895b8159d415ef52278b9aa8fa66ee6c437506c4ccb5ab3d26b8ddbc55508a8d5a5","ssdeep":"3072:gYwyP99xeip3tTv183sIWSiF6DPRNS4n+QxrA10Jfs9YcAo+:Pwy1nm8INUSpNS4n+QxjfZ","tlshash":"1ae308e9729ab17283ef117650bf420af3396884144f4028b62dd8ce3d3999951f7f7a","size":147400,"data":"","first_seen":"2025-04-16T13:13:48.08995Z","last_seen":"2026-08-11T20:51:40.21817Z","times_seen":2107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce998ca7962e71665b24c68428c7b9df","sha1":"2ca8342f48e9ca035f974979fba0cab1a6d2afd4","sha256":"e446f883a9bfc0f23cd235d9ed749c8d28f08a72bb9f02451c027efe6c1db7d2","sha512":"7e32917dd0926bbc687dffcb59cea7abf4673e4f1cf20a3e3eff1b8b7bab855ab27930d5fbcca80f6bfefaa4a81c27cff3c4645617f45a1e96fb8134412ca066","ssdeep":"","tlshash":"1311d61806801e0542b39def64c72651792e2973d0592602be8c9a0c7f9597b4af0fde","size":897,"data":"","first_seen":"2025-05-05T18:17:32.669548Z","last_seen":"2026-06-06T21:41:04.22451Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/build/assets/app-l0sNRNKZ.js","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-16T03:02:02.216654Z","times_seen":230287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ee793f046235eac36f0e73d9a01213d5","sha1":"e5a9641edd175da21bbe273be6433751b89ca186","sha256":"e415237bc7214a50b044f08500615b9f7a02d92c588e93988224a8f05b8af864","sha512":"e102b71596a51de031989699a00483ae8c77275ae704fad0de3032cf2b092115e459cd537bad5c1bb4ab6973bde8ff87bb5c66adfdbf9996523fef7a7db20608","ssdeep":"","tlshash":"7db092d458c65a00c3233991c03a953b723826a191be88a96a3de3a4993311ae15ccae","size":126,"data":"","first_seen":"2023-04-12T21:12:17Z","last_seen":"2026-08-16T03:19:53.285767Z","times_seen":9514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d9a524eaaad1e30764c6a58adea5ea6a","sha1":"906a6e40c6fda43662ca90c33a15119d1fc0115d","sha256":"d89a64e7d0792c5498d47b681cba9b51f07bf7ecff4edf004344143ce13187a5","sha512":"77366893ad780cede7a45d41c8795428515b9d67de82f6084a930c18fd220919cedcf0acb6efac5bf62e1ad0de05c6b495d6002e46d0ed946c4d164d702e8a5e","ssdeep":"","tlshash":"b2e0d888684960a4c05f39394e9858ea23fa325b503891903f1ddf209bb1092e35ce09","size":383,"data":"","first_seen":"2026-02-20T13:19:28.546989Z","last_seen":"2026-02-20T13:19:28.546989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a9520e1c9ddd09f16e0ef2d4819101c3","sha1":"7943694d146c2ef222ddda9475279a64ef1f796e","sha256":"937f41abeffefcb194c7eda8b59f1c8184c756e50e950982e45265ad265dbf0d","sha512":"25d7a3159259a2d85513fa792864a1942ee03bcd855a9599962f4cf1068e9b611ee837ff7ca20cf4cbc51aa8afdeab493f759b85e6b65939a69a263a3f18d4ac","ssdeep":"","tlshash":"ffe0d888a84955a8c06f343c4ed864a673b633da503954803f1ddf20abf1183f26cf09","size":401,"data":"","first_seen":"2026-02-20T13:19:28.549068Z","last_seen":"2026-02-20T13:19:28.549068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"fca4c0a6383522a617e261b70801e306","sha1":"60ee5a0832a67c624daf093e162d148db8ff8e0e","sha256":"96f8a92a992debdbd219b8bb28798e87ce20dd3d72c23750ef5124ed849eb162","sha512":"4408c0bb2a3e4d5dfa62beb805d3f82f0b1f1c99aef933bf800690680c815eddbe32333e17e7fcafb25b8b2c3c03b7fd79de05bab44f04305fd8d5cb8d6b7a66","ssdeep":"","tlshash":"1cc012c408c7ad0493237dcac0bfe46b252c2a71d27d44671f787b9e51b346ae18dc69","size":189,"data":"","first_seen":"2025-07-03T16:08:02.264272Z","last_seen":"2026-06-11T20:48:14.900124Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/flux/flux.min.js?id=3ec2d92c","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec2d92ce8e660082d158ab47a3285e7","sha1":"19f075b7aff3f822486399226901937c263a43d8","sha256":"df77d222f9149c9259c474a7293347e70aaa6b699e3c2306a29cf61959e0f70b","sha512":"b0013141edf5dafb3bd96f75bce386b609a8b3607f39514005e00b81eff9d8a4ec333f402dca908622828c8aed3b023956f148841becb5e54862b0f42c2fef6c","ssdeep":"1536:lq7svF2yoAlIHIs1IJ1+W4eD2PgoDBSLFn1uHZoAy5tG2Nd2eSa1e8gd5JoIOU8J:R2yoAlI/1IJ1b4g2Ulp1IoTU8u6","tlshash":"f9a3f7b4332676326aeec1daa8728143f32631a4a106003db55cdede695dc45d2fbf72","size":104667,"data":"","first_seen":"2025-05-05T18:17:32.66845Z","last_seen":"2026-02-20T13:58:46.129982Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"de6717fca1bfc2ed42290f274f9e7602","sha1":"7f6a8bcb3d8ae47948d861ab277a9a519fe8242d","sha256":"321610e535fd987622077cb0ce0ff3afd25e566b03844afd5f86e7b810c2038a","sha512":"d72a3d6d01d92847adb9b964176ffb5faf4cb35b0a8f2fe17380ed41043f39d8697e9d4e28599433a696822bf7a051735b3f431685eb64949ba171f5e99dd00e","ssdeep":"384:DFWgxJtQ+ruJ4pwY4e9S140AZpYidfrdgaTIjEFI+Db:RWgxXQV4VQjsfX","tlshash":"4682761923264979e5ef2de6669f114825f44083bd5c9a483fbfef893f369c400706ae","size":18624,"data":"","first_seen":"2026-02-20T13:19:28.552023Z","last_seen":"2026-02-20T13:19:28.552023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e875637a11b2e1114dadd5e526a3eb6d","sha1":"739d27e28084fa9ef48a22bb2e8a3d8a25c6420e","sha256":"b34e8ab29ca89a5f3f328a5b70c91d0dced2159b11027eb68830159cdfd11004","sha512":"a5a4a15fc47459d0ce038996acedfd99dbffc479cc1a90f4045922c4cca45ae06fbb3e9c3bdcf884674689991c475daa531f28d2cef23f02af02b38d97f62eb6","ssdeep":"","tlshash":"bac08c80dcda9b40c39338b2a079643a21241aa2d0be48692b38ab64a43300af11cc6f","size":158,"data":"","first_seen":"2026-02-20T13:19:28.554587Z","last_seen":"2026-02-20T13:58:46.164176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/build/assets/app-l0sNRNKZ.js","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /build/assets/app-l0sNRNKZ.js HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1\r\nlast-modified: Fri, 20 Feb 2026 11:51:08 GMT\r\netag: \"69984aac-1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-16T03:02:02.216654Z","times_seen":230287,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/flux/flux.min.js?id=3ec2d92c","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /flux/flux.min.js?id=3ec2d92c HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-length: 104667\r\nexpires: Sat, 20 Feb 2027 13:19:01 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Thu, 01 May 2025 20:27:37 GMT\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\naccept-ranges: bytes\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104667,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49433)","md5":"3ec2d92ce8e660082d158ab47a3285e7","sha1":"19f075b7aff3f822486399226901937c263a43d8","sha256":"df77d222f9149c9259c474a7293347e70aaa6b699e3c2306a29cf61959e0f70b","sha512":"b0013141edf5dafb3bd96f75bce386b609a8b3607f39514005e00b81eff9d8a4ec333f402dca908622828c8aed3b023956f148841becb5e54862b0f42c2fef6c","ssdeep":"1536:lq7svF2yoAlIHIs1IJ1+W4eD2PgoDBSLFn1uHZoAy5tG2Nd2eSa1e8gd5JoIOU8J:R2yoAlI/1IJ1b4g2Ulp1IoTU8u6","tlshash":"f9a3f7b4332676326aeec1daa8728143f32631a4a106003db55cdede695dc45d2fbf72","first_seen":"2025-05-05T18:17:32.66845Z","last_seen":"2026-02-20T13:58:46.129982Z","times_seen":4,"resource_available":true,"data":null}},"time_used":3203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":2819,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/instrument-sans/files/instrument-sans-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:02.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /instrument-sans/files/instrument-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dspf-cheminotcgt.fr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:19:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16860\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6984d2f7-41dc\"\r\nlast-modified: Thu, 05 Feb 2026 17:27:19 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/10/2026 11:54:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6e8890bf8afbec298e855a718d871e4f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16860, version 1.0","md5":"c178fc5e2d410bc57c83447afe77592b","sha1":"34c0565b38c8c7fe0ffddaa14a440b7350ccc396","sha256":"9a91efaa3599a6ef01b2f49e9ec670e3a2f39baeef09c73198f1052cf3bb0850","sha512":"20f1bd7e6e120f528d952b6945481eb126df409ed346a2008885941351bd8846e43363e1b2b5454e339e0d5f66b7a0f2db7d71323ed4a7ee5f4ba5f9255f6807","ssdeep":"384:t+5W3aB444gTvfIuCQpA2O43hpevgNw+Tc+QM68+uTo71j:Umai41j8QpAqhSAw+Y+qOS","tlshash":"6672d170ac40889eea7b747f91f4c883e56079d51ac4de1d23ae797bd3152bc852260f","first_seen":"2025-06-08T15:26:38.757928Z","last_seen":"2026-08-16T01:32:12.20062Z","times_seen":1040,"resource_available":false,"data":null}},"time_used":1395,"timings":{"blocked":660,"dns":1,"connect":33,"send":0,"wait":69,"receive":5,"ssl":624},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/favicon.svg","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:04.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 12 May 2025 11:27:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6821db3b-dd9\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d65603fc671e2ab354f3ff070494594","sha1":"139952bf6929a4d223bec823dc1953798895ec6c","sha256":"242f4f8f93f5fbc6c8aeec500c9bac02dcfe68daba166d484c5cdc986c88d8ee","sha512":"7d2b2375e11e705dd273f5ac9cb41fb1677b1a5646659f76836135ff335969eafe5d378c3eda6c5a2a39a46df54575f4c91fa97c20d78fc48bf321f378c6b242","ssdeep":"","tlshash":"1c71b6ccdb29d1fcbc46e7f5c02a554cb59368f5a600d720c7fc8d26e52145ca9d588b","first_seen":"2025-07-01T03:18:17.601752Z","last_seen":"2026-08-16T01:32:12.199318Z","times_seen":111,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/img/header-xl.jpg","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:05.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /img/header-xl.jpg HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108270\r\nlast-modified: Wed, 14 May 2025 12:11:33 GMT\r\netag: \"68248875-1a6ee\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x464, components 3","md5":"2ccdc71705f346280736d92452b7633f","sha1":"597f3152431d99f980d2348fa9f87261da764916","sha256":"bd598342c6c1cf1bc78a83eff21ad70d2ce0403118094dab2ff1cde3b07ed617","sha512":"6a7d06b8c67bfaa6ae411e8f9dbdbb9c7f3da5a56b9bfa5ac52eff8df7366fb2a47f1a9531ff19041293e6a74e6087807bb926f7ae1c4d9e5dbfe3907f397a22","ssdeep":"3072:X1Pu6qkAKufS7VkRFeuDn+0IngUiflaagtNfQXg:XiKua7VknZInA8QQ","tlshash":"14b312b147f0f76c9144bf947bc98388f526a06d8e022e17ec835889f40e5eca4ea5e4","first_seen":"2026-02-20T13:19:28.513394Z","last_seen":"2026-02-20T13:58:46.137557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1491,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":1164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T13:19:01.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; expires=Fri, 20 Feb 2026 15:19:01 GMT; Max-Age=7200; path=/; secure; samesite=lax\ndspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D; expires=Fri, 20 Feb 2026 15:19:01 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65559,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15828)","md5":"97020616fb23b4c8ebd4e733fbba90f9","sha1":"8bf861c6e14bb6aa219a5b4fa493588fd4693e77","sha256":"189e52805a0008348707379d22f90956de6142deeac6474fcd1d2609120a9184","sha512":"6609654988cda6fe5c97dad2bbe20dea481705ddd9615fa91641ed31d3fc2a9fba802f0fc8a920853a05a69b360be1c483d02498c8433c50202d3d128c5616f2","ssdeep":"768:+2r7M03LBrePKG3Aiock+w9yWbK3K3KsKZKEKvKZKFKwKfRKBKBKWK4KUK7HI/U9:+yyWgR/U4ZTd/zDgKWU2","tlshash":"0353943412b9497ee1df3da4e256230462fb8353ba5d43f4377fa9942f66898cc23498","first_seen":"2026-02-20T13:19:28.515332Z","last_seen":"2026-02-20T13:19:28.515332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":209,"dns":87,"connect":55,"send":0,"wait":152,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=instrument-sans:400,500,600","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /css?family=instrument-sans:400,500,600 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 05 Feb 2026 14:46:26 GMT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/05/2026 14:46:26\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7fb8134609cc62dc1de412a000811e90\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3216,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ace136c0a6fe6427e9d963629a2ed365","sha1":"e56580c7550fd2e07b0c1431ee453964360a44bf","sha256":"da2a0027d4b0e93baf5df93e99d1f9632d6264d71242e7745447dde3985e1978","sha512":"d02fb8d5966cac35acda5b07443fa3df4e8d9f3bd49fbd4be8a690e80719a14bfc0b529b787c2ea49bf529b47b1ed1fcb003aa58223c012674015f76fa25fcc2","ssdeep":"","tlshash":"0361ddf1445b36049f83192222e7de231e1ed112f045a85a9e3638d48ea4d3d97f3b6e","first_seen":"2025-04-12T15:00:33.052844Z","last_seen":"2026-08-15T07:03:35.797523Z","times_seen":615,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":158,"dns":51,"connect":33,"send":0,"wait":67,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/img/logo-480.png","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /img/logo-480.png HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 3029\r\nlast-modified: Wed, 14 May 2025 12:11:33 GMT\r\netag: \"68248875-bd5\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 480, 4-bit colormap, non-interlaced","md5":"a6f1f9fc8d3e92b33c253069732e0611","sha1":"36a775195c94e6c6f64a6cea87cd3244dd7a8f03","sha256":"be6492f5f3c68947039d57835e0e75906283010d2922155855f4ca88cd17a504","sha512":"61f37f99fa5aa3b0b5d23240c76ca55b3fc9633a0ed32e9a567af6b154659f2ba8d156504fc21a131ad0139533f61c0173b25c50c9a466f148bd308c6d0c8189","ssdeep":"","tlshash":"2c517d5d60db7f3275e24f40c850715215a4cae60480d0863558eed27ff6cfe03ab2a7","first_seen":"2026-02-20T13:19:28.519299Z","last_seen":"2026-02-20T13:58:46.13352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/legacy/img/carte/fondcarte.png","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /legacy/img/carte/fondcarte.png HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 41260\r\nlast-modified: Wed, 14 May 2025 12:11:33 GMT\r\netag: \"68248875-a12c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 630, 8-bit colormap, non-interlaced","md5":"652126028e6733141c4932367c0c4357","sha1":"ce977c7b91547e5f9663412636683aeedf2761fc","sha256":"23cd83dc9823e025a1b5afb3e82b97581e1a5a4a05663fc6b37a3a2d9c00820d","sha512":"6fe9a9443cc97997718a10c7120d40a5d0df1bfdc71fabf1c43970b26db828d8d4fdf59f0f45c4b39b8d31a8c715835102ce643c1a6497a1d7158aa608edb857","ssdeep":"768:Fs6aBLXO8AaQ/IMcJA1ozw/z+HdSoaNvGwma1UgtuHQz9lJYDO5HtGx56HIhoJGG:CMaQQIKk/SHIoacwre+1BYDONtGx56HZ","tlshash":"fa03e110d23f194889e8f8265b2cf08b440697ddeca6a4d47c6f566891f607fa730dbe","first_seen":"2026-02-20T13:19:28.521474Z","last_seen":"2026-02-20T13:58:46.135607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/livewire/livewire.min.js?id=df3a17f2","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /livewire/livewire.min.js?id=df3a17f2 HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Sat, 20 Feb 2027 13:19:01 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Sat, 12 Apr 2025 22:26:52 GMT\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147400,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45588)","md5":"01a4ecba1471b8db8c218a2d07b077ee","sha1":"eeae26cba53413392c6fb29f94a1d6874919be06","sha256":"7155486d3c2a795d1cc6234dcbcc877020ef5b4b352adbc7a13f5829c6b9db4c","sha512":"7310167c35148f35578a5c05db24aeac5fbdcf7aedf910910c0e0befcbe09895b8159d415ef52278b9aa8fa66ee6c437506c4ccb5ab3d26b8ddbc55508a8d5a5","ssdeep":"3072:gYwyP99xeip3tTv183sIWSiF6DPRNS4n+QxrA10Jfs9YcAo+:Pwy1nm8INUSpNS4n+QxjfZ","tlshash":"1ae308e9729ab17283ef117650bf420af3396884144f4028b62dd8ce3d3999951f7f7a","first_seen":"2025-04-16T13:13:48.08995Z","last_seen":"2026-08-11T20:51:40.21817Z","times_seen":2107,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/instrument-sans/files/instrument-sans-latin-600-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:02.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /instrument-sans/files/instrument-sans-latin-600-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dspf-cheminotcgt.fr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:19:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17408\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6984d2fb-4400\"\r\nlast-modified: Thu, 05 Feb 2026 17:27:23 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 729\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/05/2026 22:56:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 800296c55fde8792d1efbd7874c63d0f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17408, version 1.0","md5":"36a59be5465943b0e54b6f24bed0e174","sha1":"62108f92f6cde4ccedc1082c493cd938c0e58471","sha256":"efb770916eda95a0e31d80cccde9651d4e8617010b21220e9f227c4820d675da","sha512":"87691957378151968f79ef3c6cbd592e774321a1cf30962fe585cc91b6c8a6ea33f617dcd15b78fe3219351d43ddc4957efae1ddfdc648a9353a16fbba963420","ssdeep":"384:mOLPYa/lzDYAJyhPSv5y70OxdPqliHeROhCqwgxV+bYI2RVZNIqY1/81HorJdmk:Tw2VJry7HxEoHeYktCVJIIZ40pUJdj","tlshash":"c372d040ee15d9c1dbdaa3b1a481d997276c87b2d0ef260ebd01182c8ec247cbf55af5","first_seen":"2025-07-07T04:50:28.11912Z","last_seen":"2026-08-16T01:32:12.175615Z","times_seen":551,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":72,"dns":1,"connect":33,"send":0,"wait":34,"receive":79,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/apple-touch-icon.png","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:04.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1662\r\nlast-modified: Mon, 12 May 2025 11:27:55 GMT\r\netag: \"6821db3b-67e\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 166 x 166, 8-bit colormap, non-interlaced","md5":"4ec34bfee5050d402638888ce2e9a968","sha1":"cdedf5b84942a5511948d1851ecd2c7930b5b1b9","sha256":"4001aa032ff113e1a268a9bbf1ab0fd9949439f9f54a85895956eb323aba977d","sha512":"a1bed2b4603432bb82f5164bdfed801d773ef2c81892bf921186e01f6f2a263e6c2bf411a3b29ce76743e290f6a1d3d63e341a0fbfc376a257348fe5916e2cbd","ssdeep":"","tlshash":"cc31d6d7c5490a1afea98030c6bdbd5cb52c2c88a3595fe70b844aef29903802737c62","first_seen":"2025-07-01T03:18:17.602652Z","last_seen":"2026-08-16T01:32:12.17358Z","times_seen":160,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dspf-cheminotcgt.fr/build/assets/app-DkDSlXkI.css","fqdn":"dspf-cheminotcgt.fr","domain":"dspf-cheminotcgt.fr","tld":"fr"},"ip":{"addr":"146.59.159.220","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dspf-cheminotcgt.fr/","date":"2026-02-20T13:19:01.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dspf-cheminotcgt.fr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 20:45:56 GMT","end":"Sun, 15 Mar 2026 20:45:55 GMT"},"fingerprint":{"sha1":"CD:CA:84:9D:08:8E:CA:57:4F:4F:62:05:93:14:B4:27:F5:58:F6:52","sha256":"72:46:C7:4D:63:AD:59:8F:0C:8A:8C:B0:6F:3E:55:6F:F0:EA:76:A7:F6:CA:20:2D:F1:A7:69:0B:E5:ED:C8:00"}}},"request":{"raw":"GET /build/assets/app-DkDSlXkI.css HTTP/1.1\r\nHost: dspf-cheminotcgt.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dspf-cheminotcgt.fr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InNBNmQzcEJBbVRwMXhhdk9TekFTcnc9PSIsInZhbHVlIjoiTnd5NnFIZ3VieXhuQmRyZFdrSEMzTS9kN3FCdG5saURlb05zMEZmbDhrczY5VSt6Q3V3bzNCTE1mUytYUWV0MXZuSEFidUsxa2cwRVdOUThkd2txRHMrWHp6NHNtZXR2VzRkbVJleFIzTU14K29ZTXRwWncwWXl1K0hoNXExRUsiLCJtYWMiOiIxNmMyNWYwODAwNWZhMzdiM2U4NzlmOGU5MjFkMWRjM2EwZWFjNmFjZTNmYjhhMmI1M2UxMmIwZjk5YTZjNzFiIiwidGFnIjoiIn0%3D; dspf_cheminot_cgt_session=eyJpdiI6IllkWTUrcStZUTI3SEp6YlkwelJWTmc9PSIsInZhbHVlIjoiVjVLR1M4YW5SbFVQcnVKb3NFZkRVemgvUVJnZkNpaGlHd0pKYUZtbURLUythSm56RDE3VFB5QkhkTlliSVJyOEdqeWZYQlRSY0Fwc2tOY3NCNTdRRkZ1SEZPMGgvNE92dDh0NHF2VWs1NFZTMk9NaGJjVFZ6QlpIVzAxV3lhY0siLCJtYWMiOiI4NWMwYjM2NDI0MWJjMWQ3YTVhNmUwMWU0Zjk2ZTVhNzE3MWUyNzY1ZGMwNjQ2MThkN2QyNzc2N2FiZDc5ZmQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 13:19:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Feb 2026 11:51:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69984aac-2569d\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b85882683581d234090c5568e21bda22","sha1":"7fdbded4480e145c421a0f76aeeb3be494dac552","sha256":"573a5f6a32666bffb72ab9c2b46ae9a674458e12fda85d0e509020d6e6f8efa2","sha512":"dfbf51e2d1f51610d7eb2f703218e1b955b37d3cd9b1128fff049ae31bed7d15cc415549283ac04643e6c9829bac48dde4e45cd30e1f4057f6bdabd8a0cd793a","ssdeep":"3072:2Ss++srmHOuK6kW4h2aCeYwjAcGfdhrDzBNlLRxfoIMqMvXnLzfZsXLDrbdN5lPC:nsWI3wvdfI2wc6w3","tlshash":"1ae31ea8f229c2abbd33687d139ce91d600ff042ec565bfdbf21e12416c66e718e5914","first_seen":"2026-02-20T13:19:28.52657Z","last_seen":"2026-02-20T13:58:46.146605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-20","alert":"Phishing Block","trigger":"dspf-cheminotcgt.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dspf-cheminotcgt.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
