{"report_id":"ac6956a7-c2dd-4a3a-9d31-c5cb0dd38f67","version":0,"status":"done","tags":[],"date":"2026-06-22T10:11:14Z","url":{"schema":"http","addr":"fr-relay-tracking.com/en/login","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":0,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"fr-relay-tracking.com/en/login/","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"title":"DHL - United Kingdom","dom":{"size":22550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (320)","md5":"8b3e235cf88a602e5dae1ae0d0c01077","sha1":"40a6e16fef5c82ce0801ba27229495392d5f003c","sha256":"59cf728dd25a9ee8e256c340d6d1be822afbc0107834d8f6286f22f9d492cf97","sha512":"3315fc8d1a088c5c7077e85c9ef10eca8facc5fae8f70b4f2eebfadd205f9a061fe0106480a33f1165d5ad7c2fd81d638e1a7b7bdebf9966c2810d98e38a475b","ssdeep":"192:6FrQY/TvtLDkmNfpFsFl0IR8WPW1jfylYyaFy1SpyqqqFjNZWJ4h:6FTvNqlTW1e7a81SwqqqJZ64h","tlshash":"e5a2ff6098f010662263079bbba57f25eee2cc43da4d3245f5ed03986fe7c52ad07729","dom_hash":"domhash9c9f715e59072f9446a1f9c413827c0c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fr-relay-tracking.com/en/login","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":0,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T10:11:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fr-relay-tracking.com","ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"domain_registered":"2026-06-14","domain_rank":0,"first_seen":"2026-06-22T01:41:35.708783Z","last_seen":"2026-06-22T01:41:35.708783Z","alert_count":138,"request_count":23,"received_data":1213931,"sent_data":13368,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/js/jquery.js","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-17T07:43:42.024842Z","times_seen":260886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/dhl-logo.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.492Z","timestamp":1782123050492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/dhl-logo.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 962\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"3c2-6385b99eeb000\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":962,"size_decoded":1241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"532ab610b8d23e1a76fe835ea38d3f64","sha1":"bb8143056f80f377663a6c2f760e2ba5cd8ba7b9","sha256":"328777be6ed92ae88755009a974a1283abf795957a3df244576ed70f5de4e9c3","sha512":"39464441fe97ae1bab7b9c6f0a079eaceedf401d228cb2f84747d76ded304f82c561672224f6d8325f751a088cf7e74e4b2241c21931f92a647a7b05cab00de9","ssdeep":"","tlshash":"1b11ec5892f4f6769907c7f48f7c957420ea10d441e98b5cace323101354abbe0bedda","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-07-16T09:35:37.137428Z","times_seen":2697,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/glo-core-online.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.496Z","timestamp":1782123050496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/glo-core-online.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1766\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-6e6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1766,"size_decoded":2018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d612e654839ed972b9420e332b03ccc","sha1":"33137c3f10363632fe66dbe6926ff4b436b25b81","sha256":"7fb04530877285cb70aba19ab2f3eb8c2fcca66c408ca68715bd58e2dfee2b33","sha512":"388a6f1ec3ab0695fa2641ba17a9b567367b7d0f0afd31d5b84849ae0110e0b3583b041f37230736f4c6492b65ffbf5ec1fcd1dc053e7d17e534d6e95cc7b63e","ssdeep":"","tlshash":"753190624345fa7dec25576d17345ae633e2684fc1758294aaf33827bf0ccd488291ad","first_seen":"2023-05-08T21:44:37Z","last_seen":"2026-06-29T04:28:20.347023Z","times_seen":181,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/glo-core-getaquote.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.498Z","timestamp":1782123050498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/glo-core-getaquote.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 786\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"312-6385b99eeb000\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":786,"size_decoded":1065,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20224ab70f5524996910c3b856cced70","sha1":"ca9f089140d5a68f6c4446494082df09c08b6e99","sha256":"33e4d6ea85fcc033bc1d066cc202ae0a5a64dbbba953dce91874e81391d54eef","sha512":"551f90c0bd547cfe77110276ebd1c863719020ac48675253ee164d54de4fdf48d27c1c2a34ba436dcd134f97b5101c8ea75a745a66fc18f964b999ecec48399d","ssdeep":"","tlshash":"600125454758d8ba60408238677852cb13b734cbd1545eeca4ef3c31f3144c801a65d9","first_seen":"2023-05-08T21:44:37Z","last_seen":"2026-07-12T08:21:40.532138Z","times_seen":225,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/instagram-new.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.509Z","timestamp":1782123050509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/instagram-new.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3485\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-d9d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3485,"size_decoded":3737,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3acb3282b220833f708c5a9be810bcf2","sha1":"fd26e6ea27a510af8b14da5f5fc8510cf0794e06","sha256":"f27026fef42b128c001a2c722d427044a148b50fc90c55f898c4447838580237","sha512":"0d967c5539fc77fa951fd48cb816adb873a2137f2f67c3bf09a5ee736fabce3a2ddea5146986c46008a20da00ef2e7aad8606028cc7a1fa36d6e908ca94bc225","ssdeep":"","tlshash":"8d7144e367d4728513899b96be3ab06d951b34f3b47a70fcc2c7b14565039e2bc048a9","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-07-16T09:35:37.142666Z","times_seen":546,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/fonts/iconfont-f2a1844613e842cf9c18.woff","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.956Z","timestamp":1782123050956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/fonts/iconfont-f2a1844613e842cf9c18.woff HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/public/css/bundle.a076c9e355ebaef1a87910cd47836dfa.css\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 34668\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-876c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":34668,"size_decoded":34918,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34668, version 1.0","md5":"5246f1e9f94c13d3f889d24b1f777993","sha1":"24df48c43d5a4d9375489b5bbc45aff203bcf59d","sha256":"4335b993b1e481eaaa5aa6bc30daf862ebf973e704a491092db5a72b35d338a5","sha512":"44b14da8aea75a2f708dc7b6db3645254b152c7eab0366b8e182259d39d53ac57ed573087db1220d2fbb98ca72af6834a93c0b924242f0b81fe94280fb92d527","ssdeep":"768:fbVMCyLR321tjNn7gxbNdzQe3Nx7iCa/dozYzsWTD7fkBWIWMQ0ltZ:fBA21tdENNdzQe3Nx7iCkEKTDzkPRZ","tlshash":"7ef2f16ddd688f32aa87453b530e0326f0a8071c6f78ada5dc1a9b2379a154b4e05d73","first_seen":"2023-05-03T14:42:15Z","last_seen":"2026-06-22T10:11:15.93133Z","times_seen":126,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/apple-touch-icon-180x180.png","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:51.247Z","timestamp":1782123051247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1173\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-495\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1173,"size_decoded":1421,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"6e5f4e072a2793f9d9cd2a6974d5ccc9","sha1":"df0d0b28ae71a37dd321d33435c3143a446e2741","sha256":"148a09a41b13df86b44d2a1f70e2482e5d31fd91ce540a0dbe016011a5fd29b9","sha512":"22efd802d07dbcb02c2fe5226c06cb7d6e9763994b2d6bc6edcdbb0a8434eaa4d81d4d29c75af81353a774fa717ca49a0eeffcd6d1fc36cad2b3a35c20b512b3","ssdeep":"","tlshash":"b3210aaf6106ca88f249073250f68e0e11c2037a2798c3e2d6a0706645b2388becc2c0","first_seen":"2023-05-03T14:42:16Z","last_seen":"2026-06-29T04:28:20.36724Z","times_seen":453,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/css/bundle.a076c9e355ebaef1a87910cd47836dfa.css","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.472Z","timestamp":1782123050472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/css/bundle.a076c9e355ebaef1a87910cd47836dfa.css HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: W/\"685b54c0-a9099\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":692377,"size_decoded":79366,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9956cd12b9092ef5120f504bf5838c9d","sha1":"3827bd7bd1fe6a80cd695dac842a55fb0d0204f3","sha256":"c6e8a07650b1bf30b54086461894734d02443dcd17ce6a1cee1c339e22f5bf7f","sha512":"bd00be6155808742839c26ca5dd2ad15ebaeae468b125c4d96760b03d110fe9cd1c8e026a989005ee606249f5c6dde48f64a4743febd6c6ecdb2ee5f3bdbfafc","ssdeep":"3072:SD7Y5OcfTJqwCBgreWkPf+jOy868+fk8QR9USAjhzRl3j:ac46lqwCBgreW9fk8QR9USAjhzRl3j","tlshash":"64e4d842c932051cb5a38b3ff1e5726c91299c22db4fb9e2b4939b5b4a842d715b3f4c","first_seen":"2026-06-22T01:41:39.902221Z","last_seen":"2026-06-22T10:11:15.933413Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/glo-core-gogreen-warehousing.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.500Z","timestamp":1782123050500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/glo-core-gogreen-warehousing.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 764\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"2fc-6385b99eeb000\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":764,"size_decoded":1043,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b35fdccf2d08e3881c190d2619449312","sha1":"6818f542b225d5cea16f90de6ff82217ee7659a6","sha256":"bea8a5bcb115d49d5222c79804eeaceadd425c1b36c19396e746749dcc5d9be3","sha512":"0184ed460702124e730854ed7aa85f7b4e504d81e3c6d17861c556b3d8879a06116936840d2e0808dd3b1296f7bd58d938ac99f9cf051d68fe43f43507b4cebb","ssdeep":"","tlshash":"ab01d0051f8b94ac94144b41526d4dca13b360c472721dcce5dbba77f2388c866a90fc","first_seen":"2023-05-08T21:44:37Z","last_seen":"2026-06-29T04:28:20.360154Z","times_seen":181,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/glo-footer-logo.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.502Z","timestamp":1782123050502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/glo-footer-logo.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3890\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-f32\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3890,"size_decoded":4142,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ccb5ea15c3e242b155a1645fb30d717","sha1":"7c14c7cd33894f70df1f5ff821cf6dea8e65d3f5","sha256":"eec352f272b13be3883b6b13674898e718d277a690011c4e6eb1e47189656433","sha512":"51678b3755d2434d7e38390e8cc868edc9599fbce60662fa9a1fd35e830f59c3be33b183f60445bcd82f4c2d44086e0f1d28338b91f2bd8bc23b33991c6746e3","ssdeep":"","tlshash":"338196c36330f1a9580bcfed6e797d75169ea0f56a5506e989d34304428b9bafc60fc0","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-07-16T09:35:37.212572Z","times_seen":660,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/facebook-new.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.506Z","timestamp":1782123050506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/facebook-new.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 821\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"335-6385b99eeb000\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":1100,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79b871b8de76e9e6e4f2f879dac26447","sha1":"8e60e10b0f2183ca4379d89bc27e4d4d69cfc3ee","sha256":"1979d99c5483675a8be762b48f46112909e27301c1f549c8cb35a2be5503f72f","sha512":"939c32a8ed09aa16efeee91704ac394807dd858627665a73365d8f42d9d53aa4b2545863f5e01de682e6ca5469b160fe4d6801b26193fecf571409ed41a61814","ssdeep":"","tlshash":"ee01cee653fdc2aa586eba369e325ac06e111c311b05105dd7e33180ba37aff2c4b684","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-07-16T09:35:36.367645Z","times_seen":544,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/fonts/default-274a65bae9742377aaf0.woff","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.954Z","timestamp":1782123050954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/fonts/default-274a65bae9742377aaf0.woff HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/public/css/bundle.a076c9e355ebaef1a87910cd47836dfa.css\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 41084\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-a07c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41084,"size_decoded":41334,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41084, version 1.66","md5":"03f859bf58e4d37841070de34be7d978","sha1":"3436d4fa17e7ee470c3d62b08787cfa7de408408","sha256":"5af5c3746b03792640b9cafdabddfb2c5407f72988e128541a88fa439607d940","sha512":"46480332bbcb3ab254c74484b05cbafa9cd809af55899b2e0ee4fc1fe8ddf23542cf9c74def04d7a75508494aa836147ec7107422c1c4d8771fca83c0cf74b87","ssdeep":"768:Swpxn1GX3h4JW88jyotzq9q8CHLolqYj0hVAQcFY5Y5PA8ens4bi/:SYnZ9O6JCHLob8VARaY5SO/","tlshash":"2603f2998e177df42277dbf5b64d1fae31ce6960e1de081ba1420212d2e73ac948e381","first_seen":"2023-04-05T06:03:59Z","last_seen":"2026-07-16T04:43:11.571353Z","times_seen":881,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/fonts/default-815fcbb4d2c579017011.woff","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.958Z","timestamp":1782123050958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/fonts/default-815fcbb4d2c579017011.woff HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/public/css/bundle.a076c9e355ebaef1a87910cd47836dfa.css\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 41328\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-a170\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41328,"size_decoded":41578,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41328, version 1.66","md5":"e39bd2e2657ce5dd6f9c33df18529233","sha1":"6db81ebb91bfa67cef8f2f870f03046150568799","sha256":"19d0bda83ecbc986620468801adf000c77c3c38398650903c63fac8dcbac4383","sha512":"151b9d9cfd803f891f1b4c4e7ca85910040e3975084f272a4866846ecddd4c9ef34410f098f3253d4d4fcfbd2be09a9f5631db1d837d28963031e66cd09c5b96","ssdeep":"768:VM47gMjT5KaATgC/BNhOwrNGa4+mAfd5y1l0liD5B7Svd00/hTidR63ps4bi/:VB79grkC/BNhZEOmodzM5B7OdbpbO/","tlshash":"c303f28e5ff5ecd9c247f01586d9e9e5b01428a7f449e530ea97073cca37aa710c192b","first_seen":"2023-04-05T06:03:59Z","last_seen":"2026-07-16T04:43:11.622179Z","times_seen":665,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/en/login","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T10:10:50.045Z","timestamp":1782123050045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /en/login HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 319\r\nlocation: https://fr-relay-tracking.com/en/login/\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T07:40:23.795151Z","times_seen":17308934,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":19,"connect":31,"send":0,"wait":37,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/css/clientlib-core.min.css","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.469Z","timestamp":1782123050469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/css/clientlib-core.min.css HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/css\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: W/\"1d-6385b99eeb000\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29,"size_decoded":288,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"b104a4a85c21511ada13e2c6e7552d37","sha1":"475c6eb572d41f86d612ef9d8d64c2cd9ae95980","sha256":"34a8d4f240f1b7a01d0472d5367e1bc57e17f70a12a91aae37dcac3b33b24732","sha512":"a619fc2edfedf9ebc77b7d5f733780f7440e366e8ebeb5f6ab6c0bc59db7014ce9250e83ddcaf7c9dfe1c6788819574f8585d411c4e4785477a55ba2cd3f320e","ssdeep":"","tlshash":"ec8000200820ea2b00208088300f008b0e2c8e0e2322c3020820302000000280b330c8","first_seen":"2023-04-05T23:32:55Z","last_seen":"2026-07-16T09:35:37.206866Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/css/bundle-utapi-ui.a076c9e355ebaef1a87910cd47836dfa.css","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.478Z","timestamp":1782123050478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/css/bundle-utapi-ui.a076c9e355ebaef1a87910cd47836dfa.css HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: W/\"685b54c0-419a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16794,"size_decoded":3194,"mime_type":"text/css","magic":"ASCII text, with very long lines (16794), with no line terminators","md5":"fa70a131d60aab2a86531c448d7f97f8","sha1":"42b34d8187c11ea24b2913bc5a5216e13dd9588f","sha256":"bb8d84697b0263f49a381f04247f5b7148bdc32f194eac5b640e5c33e789b3a0","sha512":"008da8ce682dc53decd84204a514a6bdb47951696c69fd652f95854718f90f2a6a71c7962aa808e3bc2176464b02874191fe362bc07b4e49fc50f211139adb83","ssdeep":"192:8MLLtLLhqDY/LFVLfZDch2LhLgLCLmLn1LE+OXLgLw+0UJLgLCLtLAPEAPyQ2OQQ:5HVSIrD0Q2OQjZKt","tlshash":"9f7201518d90183cab22875ce1e1b548be28902af9cd08d7fd13dda77fc295625efb48","first_seen":"2026-06-22T01:41:39.903136Z","last_seen":"2026-06-22T10:11:15.943034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/employee-receives-customer-signature-0001.web.1365.428.jpg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.495Z","timestamp":1782123050495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/employee-receives-customer-signature-0001.web.1365.428.jpg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59706\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-e93a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":59706,"size_decoded":59957,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1365x426, components 3","md5":"24e725f09fd2d5379c8f5a3b77fe33a2","sha1":"afe29e2469b7809ff81100db7023b9f7ac1d67f7","sha256":"a0b1e24781fa120cf03e207ad1d5bdd2260fcd85e57b9201df87cfd26423c8cd","sha512":"99b7443451229c2372a718e742865676de28830752ed48a15d05e4a7c0170714c380836cc02b1b97a77ef5225d6ceef1cb972bbe1fa4d203804820733794ebb1","ssdeep":"1536:+VXgSent+OcMdCodBAlkSISqcqsAhIRFVoLO71:rSc+O1EXlh5A+RHlZ","tlshash":"0e4302a837d20662ff6daa5717bbfb639dc0cc4c36c42231da1b42647d51aa42f187d0","first_seen":"2023-05-15T19:27:22Z","last_seen":"2026-06-22T10:11:15.948598Z","times_seen":15,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/youtube-new.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.503Z","timestamp":1782123050503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/youtube-new.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 818\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"332-6385b99eeb000\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":818,"size_decoded":1097,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01c198d73e6a3f7c351b61f860e0fd90","sha1":"a7bb3ec37dc19e0b8d07aaa272a0de60d7242330","sha256":"8ab280a31a012ac7c6fb77be3e134d2858d50e3b1d16ffa4b45f35487cadf5bd","sha512":"65a8e6a8e2bbcf3adf8dac8816294e66d2aaba9acec34e0acee7713ec350e64b45cf8afbefc950fcd7ade971779c5afd366b5a056bd9c5a316fe66ff856f42e6","ssdeep":"","tlshash":"af01a3cf3b21f55c48d582219e3afd803b5510b1274501c5d4e67fbd01a72b21c40da9","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-07-16T09:35:36.345981Z","times_seen":610,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/fonts/default-3e828e80f6e985c352eb.woff","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.959Z","timestamp":1782123050959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/fonts/default-3e828e80f6e985c352eb.woff HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/public/css/bundle.a076c9e355ebaef1a87910cd47836dfa.css\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 44260\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-ace4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44260,"size_decoded":44510,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 44260, version 1.66","md5":"4a350e02a03ac62e72e9ea575b31ce84","sha1":"d47b03b96b6e7034a1473a293bb594e597a41dc2","sha256":"87c40e3961e21f759770615ae67568a3de3ec6e0735f1238a6aae062f4ea15d5","sha512":"d2ead47120923e9c5b67ee0182226b6e93cf83ec0356609e5df54565fd328992b0b3626e2a1225ea644c9d54cbacfa0155b6604f66672965827756bacb2643f5","ssdeep":"768:1pDepQBLK+8IgCFfDIElcgdFUZinNDN59EBiFDacS20ZoXjnyw4bqRm+oAbs4bi/:nDyQBekcPinP5G4Na3ZoTEU/oAbO/","tlshash":"b913f2da05e2fba4e8275a1cb0400acfb79f4a5cb34e1dedd852574067b9b4289c2c17","first_seen":"2023-04-05T06:03:59Z","last_seen":"2026-07-16T04:43:11.589062Z","times_seen":666,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/favicon.ico","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:51.249Z","timestamp":1782123051249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/favicon.ico HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:51 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 1150\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-47e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":1413,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"d8106bf3a1d00ab43b01e6e3c92500eb","sha1":"202b5e8654ab1b28351378293bca3b9d844cc29b","sha256":"9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e","sha512":"3a77cbe48e27af035abcd70f0ae679195bb1b210eb02bbd86d3db270349fcc6f9b5ad8da10ff97f786865b18657531197d8a4e0d2ff1f08a2f117b2c1422ae89","ssdeep":"","tlshash":"78219a38ae408488ce98d135cdc2e5a20116af839e2119c763cc3f82764389ddfb3e06","first_seen":"2023-04-26T08:39:49Z","last_seen":"2026-07-16T09:35:37.182731Z","times_seen":3122,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/js/jquery.js","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.483Z","timestamp":1782123050483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/js/jquery.js HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: W/\"685b54c0-15d84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":89476,"size_decoded":30358,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-17T07:43:42.024842Z","times_seen":260886,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/img/linkedIn-new.svg","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.508Z","timestamp":1782123050508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/img/linkedIn-new.svg HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1054\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: \"685b54c0-41e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":1306,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fff9adf3097c217f1849b01babba2fb","sha1":"7e8144a89322cb04e7fbcc57817f802423cadb9b","sha256":"86a4a9a96396b1de82e1616e6c1c62a2185f808328816c40e2abb03c37c4e965","sha512":"8e33897427026d426ba2f8f89053ae014d30af0a9cf24588e0620448cad2c75bee21e4672318daf7286b30193bb2fb6e8d3c5327d900fe49cd809c6ab32c4a1b","ssdeep":"","tlshash":"b11112b1e6a4ccf8a5659df4adf3b55e572834dbb70101fc9071a06248d75f4a301d89","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-07-16T09:35:37.213507Z","times_seen":608,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/en/login/","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T10:10:50.207Z","timestamp":1782123050207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /en/login/ HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3938\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.1.34, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":22908,"size_decoded":4338,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (320), with CRLF line terminators","md5":"43fc110900f592e8b9aa5e4d7ac59f7d","sha1":"ac0007b2b1e457932e3a987fc7b1030acf14adfb","sha256":"977f1bff2bd88a7d48893b1913f9e64182f973416d62ef1db75bf544a7fc9455","sha512":"622638d33a8b169ebc8f35e53ce48fc90a6034f3a8fec35c952f3921f0cd2dcc43ebdf50961e51e65452bf0e2090c843b7f6d18bbab151c27d601a7e5b634e62","ssdeep":"192:ZCCuRlC1aqt2MpmPk5nD/7sV9W/LkX+8yyNyDsyiVkyVqa5shbbD:ZCCtrE+DbLkQ/D1iVtVqa5shbD","tlshash":"04a2ac60a8d014262233469baba5bf25fee2cc43da4d3285f5ed039b6ff7c116d17624","first_seen":"2026-06-22T01:41:39.894508Z","last_seen":"2026-06-22T10:11:15.952214Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fr-relay-tracking.com/public/css/css_styles.css","fqdn":"fr-relay-tracking.com","domain":"fr-relay-tracking.com","tld":"com"},"ip":{"addr":"15.237.176.131","port":443,"asn":16509,"as":"AMAZON-02","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fr-relay-tracking.com/en/login/","date":"2026-06-22T10:10:50.481Z","timestamp":1782123050481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fr-relay-tracking.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 20:41:51 GMT","end":"Sat, 12 Sep 2026 20:41:50 GMT"},"fingerprint":{"sha1":"33:86:E9:C3:2B:2B:69:74:76:86:EC:77:A1:8B:48:3B:81:50:0E:48","sha256":"87:F1:8E:E7:F6:28:84:29:5A:6D:3E:7C:D2:8C:C0:77:82:6B:B4:CE:D7:A0:35:75:6D:00:B0:54:6C:A3:5A:B7"}}},"request":{"raw":"GET /public/css/css_styles.css HTTP/1.1\r\nHost: fr-relay-tracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fr-relay-tracking.com/en/login/\r\nCookie: PHPSESSID=p9bc0mvmp12mgnn2fpojs47hrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:10:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Jun 2025 01:45:36 GMT\r\netag: W/\"685b54c0-244b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":148663,"size_decoded":25460,"mime_type":"text/css","magic":"ASCII text, with very long lines (36319), with CRLF line terminators","md5":"b012cd081d6d7fb5f96863771a24fe57","sha1":"9095628e05a10daa179f4dc49775949206f601e3","sha256":"9e41d1d8550a483837c81d8a5c9916ae824eee9fe6fcfcb23ed93d0632d32ed1","sha512":"c757f02a0cd37bc925fd34680e1019a5a854bed95e8aeb706ed093d75210b53a6528371ab729e9bd02194dc651e02489933d3e5025d82d0136ba73ef4e4f43c2","ssdeep":"1536:Te6ZLgclpuO5FTaKyFNiaS4kQDS10qP/N1kFKXV:q6ZLMjQnd1iKXV","tlshash":"00e32fab3951130eeae3cb1997623988b9119c9fbd7358eef10d53784b8c3e24d5064e","first_seen":"2026-02-24T01:18:51.692493Z","last_seen":"2026-06-22T10:11:15.953086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"fr-relay-tracking.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"fr-relay-tracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}