{"report_id":"a9c0fbb8-b8af-4537-be75-1c7ba8eb39c9","version":6,"status":"done","tags":["phishing","threat_simulation"],"date":"2024-10-12T18:13:35Z","url":{"schema":"http","addr":"www.bankmenia.fr/nam/150cf9f2-61ec-4265-ad7f-26b074376999/b523ef11-a83e-43b0-8b0f-73fa07fc4aa7/95684345-d3c5-4a34-8844-9c3da4ebf3e1/login?id=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","fqdn":"www.bankmenia.fr","domain":"bankmenia.fr","tld":"fr"},"ip":{"addr":"13.107.246.53","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.bankmenia.fr/nam/Error","fqdn":"www.bankmenia.fr","domain":"bankmenia.fr","tld":"fr"},"title":"Microsoft page"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-21T22:59:29Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-10-11 18:12:07","alert_count":0,"request_count":4,"received_data":3548,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.bankmenia.fr","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2022-08-15","domain_rank":0,"first_seen":"2023-05-24 12:58:42","last_seen":"2024-10-10 16:06:59","alert_count":3,"request_count":4,"received_data":13485,"sent_data":2867,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-10-11 18:12:06","alert_count":0,"request_count":3,"received_data":2661,"sent_data":981,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Awareness training / Threat simulation","verdict":"phishing","severity":"medium","comment":"Resource observed with phishing awarness training","tags":["phishing","threat_simulation"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:08.665063873Z","timestamp":1728756788665,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"53C13AA9579590C5AA281E7D8203E3A16E7FC10F1EA6137DBCA2724177E7DCBA\"\r\nLast-Modified: Thu, 10 Oct 2024 16:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4880\r\nExpires: Sat, 12 Oct 2024 19:34:28 GMT\r\nDate: Sat, 12 Oct 2024 18:13:08 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"8d0c1ae5484a4448ab6dd48672401aca","sha1":"a0604686c65b0ef3bbd3e3d7de3cacde802019eb","sha256":"53c13aa9579590c5aa281e7d8203e3a16e7fc10f1ea6137dbca2724177e7dcba","sha512":"f6becac814623f8e8b1d0288711b318e96a589b8fe42e73593dcd58ada030d43dec518de9ad45275561e11a999ff3f3a7d833f8470406551c7dd1197e6937cc5","ssdeep":"","tlshash":"70f0544923fab9417b6a1c267a95f2219d3925797c00828a1fa883da5c90ff0438a58c","first_seen":"2024-10-11T02:59:17Z","last_seen":"2024-10-13T01:25:40.579239Z","times_seen":9094,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:08.740975052Z","timestamp":1728756788740,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3AB4458319DB72633C073ECAC5C8DA5994F6FA797FD44BC6170FCD3400D5EEAB\"\r\nLast-Modified: Thu, 10 Oct 2024 16:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4334\r\nExpires: Sat, 12 Oct 2024 19:25:22 GMT\r\nDate: Sat, 12 Oct 2024 18:13:08 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"76d4815925a4b4cf3dbb800eaa4a7770","sha1":"317eb0f0486d1a342b5141b3b2f9ef4309bbdeb7","sha256":"3ab4458319db72633c073ecac5c8da5994f6fa797fd44bc6170fcd3400d5eeab","sha512":"cccb007e8eb7f1e1cbc61151535dd3cea5c9b27238b6a5a325678162fde50726e3978cca15c55c938a9eb4d99f66f42dc470f5dbceb6485eb31f468188f44a25","ssdeep":"","tlshash":"7df0542819b07d131730052c8f7df253df20f9d5ac0096f219a90fe23819ff099a405c","first_seen":"2024-10-11T01:59:46Z","last_seen":"2024-10-13T01:25:36.753066Z","times_seen":8659,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:09.17462095Z","timestamp":1728756789174,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"8B02810ECC47D5F71219990370D9538BFFF6E45C5FF895E7A3C60392423C5ADB\"\r\nLast-Modified: Sat, 12 Oct 2024 08:15:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2876\r\nExpires: Sat, 12 Oct 2024 19:01:05 GMT\r\nDate: Sat, 12 Oct 2024 18:13:09 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0047c90c620c7ae5d6e899dbcd92d7f9","sha1":"b40765060b59aa1231b7e4c552c7657c957a505e","sha256":"8b02810ecc47d5f71219990370d9538bfff6e45c5ff895e7a3c60392423c5adb","sha512":"3bfce57c46f25b72e75082b2b1c77e10307f154fce4ed16165c524440682111a59a9ea79beceee72bffd2797754aa76038d78fa618bf05492bbdcb24f6613ff1","ssdeep":"","tlshash":"6af0548612e639a073730726bc38ee2ebc33a9ad748a125121c383b03811bf843cc05d","first_seen":"2024-10-12T10:17:26Z","last_seen":"2024-10-14T14:16:26.622764Z","times_seen":14152,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:09.470032734Z","timestamp":1728756789470,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"98933AB8C57EE731E4F66F10D98FFEC955D29F456DDE460D0A0A1F91A5A4AA1F\"\r\nLast-Modified: Thu, 10 Oct 2024 16:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4837\r\nExpires: Sat, 12 Oct 2024 19:33:46 GMT\r\nDate: Sat, 12 Oct 2024 18:13:09 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ed6e60e33d0aa95a26592786089c9116","sha1":"53a5ea803e1191edc5630b976fa90601237d258d","sha256":"98933ab8c57ee731e4f66f10d98ffec955d29f456dde460d0a0a1f91a5a4aa1f","sha512":"a6db499567d2ce37ea7412a10514ae27d7bbc10f97f5f37681f0b40d3c7bc03e7e6c56cee0b3318b94f3e29003c8710c327e0db0fec577ae0f64a8266f1134d1","ssdeep":"","tlshash":"83f00e0907d47546677308066d7af198bf38faad2a50e38a38c446a2a819ff415c044d","first_seen":"2024-10-11T07:22:44Z","last_seen":"2024-10-13T01:25:40.581783Z","times_seen":9368,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankmenia.fr/nam/150cf9f2-61ec-4265-ad7f-26b074376999/b523ef11-a83e-43b0-8b0f-73fa07fc4aa7/95684345-d3c5-4a34-8844-9c3da4ebf3e1/login?id=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","fqdn":"www.bankmenia.fr","domain":"bankmenia.fr","tld":"fr"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-10-12T18:13:09.256Z","timestamp":1728756789256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.attemplate.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 02 Aug 2024 13:05:02 GMT","end":"Wed, 29 Jan 2025 13:05:02 GMT"},"fingerprint":{"sha1":"77:E3:4F:52:0F:27:65:38:7C:3C:1B:A3:6A:90:A8:BF:EE:2A:BF:AE","sha256":"96:85:A4:10:31:26:5F:EE:E5:AA:55:BE:3A:1C:37:8C:ED:17:8D:6E:D8:8A:20:94:05:4E:7A:2D:AC:58:28:42"}}},"request":{"raw":"GET /nam/150cf9f2-61ec-4265-ad7f-26b074376999/b523ef11-a83e-43b0-8b0f-73fa07fc4aa7/95684345-d3c5-4a34-8844-9c3da4ebf3e1/login?id=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 HTTP/1.1\r\nHost: www.bankmenia.fr\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 12 Oct 2024 18:13:10 GMT\r\ncontent-length: 0\r\nlocation: /nam/Error\r\nrequest-context: appId=\r\nstrict-transport-security: max-age=2592000\r\nx-azure-ref: 20241012T181309Z-1658df7ff64v7pqcewtfqxtwy400000001pg0000000088nk\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":99,"dns":1,"connect":21,"send":0,"wait":707,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:11.31525498Z","timestamp":1728756791315,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260\"\r\nLast-Modified: Thu, 10 Oct 2024 21:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6127\r\nExpires: Sat, 12 Oct 2024 19:55:18 GMT\r\nDate: Sat, 12 Oct 2024 18:13:11 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"af0d1cea6aa0671f0271828695f79be4","sha1":"ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3","sha256":"33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260","sha512":"d00237039cf2feddad646ae87a13ff9b0b47d8fb52fd1606c67b5dce442386fa5572805f4b1ab66eb1b181794c90a6f9e967f8535fe8efa5342363de1a696669","ssdeep":"","tlshash":"87f005d2117579649aa10d769df9fc1219365e64449502b261d8eff1acd1bfd470440c","first_seen":"2024-10-11T04:15:51Z","last_seen":"2024-10-13T01:26:22.673985Z","times_seen":8461,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:11.319612326Z","timestamp":1728756791319,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260\"\r\nLast-Modified: Thu, 10 Oct 2024 21:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6127\r\nExpires: Sat, 12 Oct 2024 19:55:18 GMT\r\nDate: Sat, 12 Oct 2024 18:13:11 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"af0d1cea6aa0671f0271828695f79be4","sha1":"ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3","sha256":"33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260","sha512":"d00237039cf2feddad646ae87a13ff9b0b47d8fb52fd1606c67b5dce442386fa5572805f4b1ab66eb1b181794c90a6f9e967f8535fe8efa5342363de1a696669","ssdeep":"","tlshash":"87f005d2117579649aa10d769df9fc1219365e64449502b261d8eff1acd1bfd470440c","first_seen":"2024-10-11T04:15:51Z","last_seen":"2024-10-13T01:26:22.673985Z","times_seen":8461,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-12T18:13:11.324960513Z","timestamp":1728756791324,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260\"\r\nLast-Modified: Thu, 10 Oct 2024 21:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6127\r\nExpires: Sat, 12 Oct 2024 19:55:18 GMT\r\nDate: Sat, 12 Oct 2024 18:13:11 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"af0d1cea6aa0671f0271828695f79be4","sha1":"ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3","sha256":"33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260","sha512":"d00237039cf2feddad646ae87a13ff9b0b47d8fb52fd1606c67b5dce442386fa5572805f4b1ab66eb1b181794c90a6f9e967f8535fe8efa5342363de1a696669","ssdeep":"","tlshash":"87f005d2117579649aa10d769df9fc1219365e64449502b261d8eff1acd1bfd470440c","first_seen":"2024-10-11T04:15:51Z","last_seen":"2024-10-13T01:26:22.673985Z","times_seen":8461,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankmenia.fr/Content/newSignInFiles/microsoft_logo.svg","fqdn":"www.bankmenia.fr","domain":"bankmenia.fr","tld":"fr"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankmenia.fr/nam/Error","date":"2024-10-12T18:13:10.783Z","timestamp":1728756790783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.attemplate.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 02 Aug 2024 13:05:02 GMT","end":"Wed, 29 Jan 2025 13:05:02 GMT"},"fingerprint":{"sha1":"77:E3:4F:52:0F:27:65:38:7C:3C:1B:A3:6A:90:A8:BF:EE:2A:BF:AE","sha256":"96:85:A4:10:31:26:5F:EE:E5:AA:55:BE:3A:1C:37:8C:ED:17:8D:6E:D8:8A:20:94:05:4E:7A:2D:AC:58:28:42"}}},"request":{"raw":"GET /Content/newSignInFiles/microsoft_logo.svg HTTP/1.1\r\nHost: www.bankmenia.fr\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankmenia.fr/nam/Error\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Oct 2024 18:13:11 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3651\r\netag: \"1db1bbd3f294843\"\r\nlast-modified: Fri, 11 Oct 2024 09:09:16 GMT\r\nrequest-context: appId=\r\nstrict-transport-security: max-age=2592000\r\nx-azure-ref: 20241012T181310Z-1658df7ff64v7pqcewtfqxtwy400000001pg0000000088rp\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3651,"size_decoded":3651,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-04-05T00:33:27.192286Z","times_seen":122152,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Awareness training / Threat simulation","verdict":"phishing","severity":"medium","comment":"Resource observed with phishing awarness training","tags":["phishing","threat_simulation"],"meta":null}]}},{"url":{"schema":"https","addr":"www.bankmenia.fr/favicon.ico","fqdn":"www.bankmenia.fr","domain":"bankmenia.fr","tld":"fr"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankmenia.fr/nam/Error","date":"2024-10-12T18:13:10.877Z","timestamp":1728756790877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.attemplate.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 02 Aug 2024 13:05:02 GMT","end":"Wed, 29 Jan 2025 13:05:02 GMT"},"fingerprint":{"sha1":"77:E3:4F:52:0F:27:65:38:7C:3C:1B:A3:6A:90:A8:BF:EE:2A:BF:AE","sha256":"96:85:A4:10:31:26:5F:EE:E5:AA:55:BE:3A:1C:37:8C:ED:17:8D:6E:D8:8A:20:94:05:4E:7A:2D:AC:58:28:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bankmenia.fr\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankmenia.fr/nam/Error\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Sat, 12 Oct 2024 18:13:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nrequest-context: appId=\r\nstrict-transport-security: max-age=2592000\r\nx-azure-ref: 20241012T181310Z-1658df7ff64v7pqcewtfqxtwy400000001pg0000000088rt\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":null,"data":{"size":4270,"size_decoded":4270,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4546), with no line terminators","md5":"cc00ba98353d4306aa885d81e26d3261","sha1":"7908cac45adeeb3bd4875b466fc7f474b63b4813","sha256":"b232938dfc924df398128b28054446d535d0985eac31621740ffc05cb8e90654","sha512":"157cf69e371d5c617866ccc0d4bf5e760662496c3e6a2b9af36fbb4434d562532cf049a0e57a5465ac9231d78262149d1a72a7e42928def7d36f9f32f9ce66fe","ssdeep":"96:TJRnJYcevDkoMaPXEZSMS75Opm7cy+7CEEsj7m:tRnJvUEZjE5om7cfCNsjq","tlshash":"3491b52e9528b676dd09d3eb5b1100271d21b2ef9eba8151b2dcd79ef3550e489831a0","first_seen":"2023-04-05T05:08:03Z","last_seen":"2025-04-05T12:36:16.153412Z","times_seen":6010,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Awareness training / Threat simulation","verdict":"phishing","severity":"medium","comment":"Resource observed with phishing awarness training","tags":["phishing","threat_simulation"],"meta":null}]}},{"url":{"schema":"https","addr":"www.bankmenia.fr/nam/Error","fqdn":"www.bankmenia.fr","domain":"bankmenia.fr","tld":"fr"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-10-12T18:13:10.068Z","timestamp":1728756790068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.attemplate.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 02 Aug 2024 13:05:02 GMT","end":"Wed, 29 Jan 2025 13:05:02 GMT"},"fingerprint":{"sha1":"77:E3:4F:52:0F:27:65:38:7C:3C:1B:A3:6A:90:A8:BF:EE:2A:BF:AE","sha256":"96:85:A4:10:31:26:5F:EE:E5:AA:55:BE:3A:1C:37:8C:ED:17:8D:6E:D8:8A:20:94:05:4E:7A:2D:AC:58:28:42"}}},"request":{"raw":"GET /nam/Error HTTP/1.1\r\nHost: www.bankmenia.fr\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Sat, 12 Oct 2024 18:13:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nrequest-context: appId=\r\nstrict-transport-security: max-age=2592000\r\nx-azure-ref: 20241012T181310Z-1658df7ff64v7pqcewtfqxtwy400000001pg0000000088qg\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":null,"data":{"size":4270,"size_decoded":4270,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4546), with no line terminators","md5":"cc00ba98353d4306aa885d81e26d3261","sha1":"7908cac45adeeb3bd4875b466fc7f474b63b4813","sha256":"b232938dfc924df398128b28054446d535d0985eac31621740ffc05cb8e90654","sha512":"157cf69e371d5c617866ccc0d4bf5e760662496c3e6a2b9af36fbb4434d562532cf049a0e57a5465ac9231d78262149d1a72a7e42928def7d36f9f32f9ce66fe","ssdeep":"96:TJRnJYcevDkoMaPXEZSMS75Opm7cy+7CEEsj7m:tRnJvUEZjE5om7cfCNsjq","tlshash":"3491b52e9528b676dd09d3eb5b1100271d21b2ef9eba8151b2dcd79ef3550e489831a0","first_seen":"2023-04-05T05:08:03Z","last_seen":"2025-04-05T12:36:16.153412Z","times_seen":6010,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Awareness training / Threat simulation","verdict":"phishing","severity":"medium","comment":"Resource observed with phishing awarness training","tags":["phishing","threat_simulation"],"meta":null}]}}]}